Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client

CVE-2021-1366 Cisco AnyConnect Posture HostScan Local Privil...

Code injection

The RDPData.dll file exposes the /irmdata/api/common endpoint that handles session IDs, among other features. By using a UNION SQL operator, an attacker can leak the sessions table, obtain the currently valid sessions and impersonate a currently logged-in user...

CVE-2023-39423 Improper Neutralization of Special Elements used in an SQL Command in RDPData.dll

The RDPData.dll file exposes the /irmdata/api/common endpoint that handles session IDs, among other features. By using a UNION SQL operator, an attacker can leak the sessions table, obtain the currently valid sessions and impersonate a currently logged-in user...

Oracle Linux 7 : grub2 (ELSA-2020-5790)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5790 advisory. - Fix CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310, CVE-2020-14311, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707 Orabug: 31225072...

PT-2023-25852 · Atera · Atera

Name of the Vulnerable Software and Affected Versions: Atera affected versions not specified Description: The issue arises from the C:WindowsTempAgent.Package.AvailabilityAgent.Package.Availability.exe file being automatically launched as SYSTEM when the system reboots. Since the...

CVE-2023-30730

Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file...

CVE-2023-30730

Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file...

CVE-2023-30726

PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data...

CVE-2023-30720

PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access...

CVE-2023-30720

PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access...

Spoofing

PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data...

CVE-2023-30730

The CVE-2023-30730 issue is an implicit intent hijacking vulnerability in the Samsung Camera app across Android 11–13: Camera prior to 11.0.16.43 (Android 11), 12.0.07.53–12.1.03.10 (Android 12), and 13.0.01.43–13.1.00.83 (Android 13) can allow a local attacker to access specific files. Root caus...

CVE-2023-30726

PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data...

CVE-2023-30726

PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data...

CVE-2023-30726

CVE-2023-30726 affects Samsung GameLauncher; vulnerable component is PendingIntent usage in GameLauncher prior to version 4.2.59.5. Local attackers could access data due to a PendingIntent hijacking flaw. Affected: GameLauncher before 4.2.59.5. Remediation: update to 4.2.59.5 or later. Note: expl...

CVE-2023-30720

PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access...

CVE-2023-30720

PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access...

CVE-2023-30720

CVE-2023-30720 describes a PendingIntent hijacking vulnerability in Samsung Mobile devices’ LmsAssemblyTrackerCTC, exploitable by a local attacker to gain arbitrary file access. The issue affects LmsAssemblyTrackerCTC prior to the SMR Sep-2023 Release 1. The root cause is improper PendingIntent h...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability previously existed in SAMSUNG Mobile devices version 4.2.59.5, which stemmed from a PendingIntent hijacking vulnerability in...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices, which originates from an implicit intent hijacking vulnerability in Camera...