log4shell-detector

This is a Gradle wrapper script for a Java project. Here's a breakdown of the key points: Purpose: The script is used to start a Gradle build process. License: The script is licensed under the Apache License, Version 2.0. Functionality: The script sets up the environment for the Gradle build...

CVE-2025-58276

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58276

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58276

Huawei HarmonyOS home screen module is cited in CNVD-2025-20906 as having a privilege checksum vulnerability. The CVE-2025-58276 entry describes a permission verification issue with potential impact on availability. Connected documents do not provide concrete details on affected versions, root ca...

CVE-2025-58276

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58276

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

CVE-2025-58276: Undefined Security Weakness

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege checksum vulnerability exists in the Huawei HarmonyOS home screen module, which can be exploited by an attacker to compromise usability...

PT-2025-36116

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A permission verification issue exists in the home screen module. Successful exploitation of this issue may affect availability. Recommendations At the moment, there is no information about a newer...

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

CVE-2025-21032

CVE-2025-21032 affects Samsung One UI Home prior to SMR Sep-2025 Release 1, with an improper access control risk that can allow a physical attacker to bypass Kiosk mode under limited conditions. Root cause is access-control weakness in One UI Home, as described across multiple sources (Red Hat ad...

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

PT-2025-35686

Name of the Vulnerable Software and Affected Versions: One UI Home versions prior to SMR Sep-2025 Release 1 Description: Improper access control in One UI Home allows physical attackers to bypass Kiosk mode under limited conditions. Recommendations: Update One UI Home to SMR Sep-2025 Release 1 or...

CVE-2025-21032: Undefined Security Weakness

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

CVE-2025-57808 ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

ESPHome is a system to control microcontrollers remotely through Home Automation systems. In version 2025.8.0 in the ESP-IDF platform, ESPHome's webserver authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correc...

D-Link DIR-852 安全漏洞

D-Link DIR-852 is a dual-band Gigabit wireless router from Youxun Technology, focusing on home networking solutions and supporting Xunlei remote download function. The D-Link DIR-852 suffers from an os command injection vulnerability, which stems from the parameter service in the file soap.cgi...

ScanSnap Manager installers vulnerable to privilege escalation

Overview ScanSnap Manager installers provided by PFU Limited contain the following vulnerability. Incorrect privilege assignment CWE-266 - CVE-2025-57797 Kazuhira Agata, Kentaro Kan, Tomoaki Kobayashi, Takayuki Tomita, Yoshiaki Yamamuro reported this vulnerability to IPA. JPCERT/CC coordinated wi...