EUVD-2017-12875

Malware in sbrugna...

EUVD-2017-12877

Malware in sbrugna...

EUVD-2017-12878

Malware in sbrugna...

EUVD-2024-31319

Malicious code in bioql PyPI...

CVE-2024-33582

A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges...

CVE-2024-33582

A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges...

CVE-2024-33582

CVE-2024-33582 describes a DLL hijack vulnerability in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges. The available connected documents reiterate a local, privilege-escalation scenario but do not provide concrete exploitation details, affected...

CVE-2024-33582

A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges...

PT-2024-25351 · Lenovo · Lenovo Service Framework

Name of the Vulnerable Software and Affected Versions: Lenovo Service Framework affected versions not specified Description: A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges. The vulnerability affects...

Lenovo Service Framework 安全漏洞

Lenovo Service Framework is a utility program from the Chinese company Lenovo. A security vulnerability exists in Lenovo Service Framework. A local attacker could exploit the vulnerability to elevate privileges and execute code...

The vulnerability of the Lenovo Service Framework (LSF) processing push notifications lies in the lack of measures to clean up special elements used in the command line. This allows a perpetrator to execute arbitrary commands or run arbitrary code.

The vulnerability of the Lenovo Service Framework LSF software for processing push notifications on devices running the Android operating system is related to the lack of measures to clean up special elements used in commands. Exploiting this vulnerability allows a malicious actor to execute...

Lenovo Service Framework Android Remote Code Execution Vulnerability

Lenovo Service Framework Android application is a special application for Lenovo products based on the Android platform from China Lenovo Lenovo Company. A security vulnerability exists in the Lenovo Service Framework Android application, which originates from the program failing to properly...

Lenovo Service Framework Android Code Execution Vulnerability

Lenovo Service Framework Android application is a special application for Lenovo products based on the Android platform from China Lenovo Lenovo Company. A security vulnerability exists in the Lenovo Service Framework Android application, which originates from the program using an insecure set of...

Lenovo Service Framework Application Android Component Access Control Error Vulnerability

Lenovo Service Framework application is a Lenovo product-specific framework from Lenovo, China.Android components is one of the Android components. An access control error vulnerability exists in the Android component of the Lenovo Service Framework application. A remote attacker could exploit th...

Lenovo Service Framework Android Code Execution Vulnerability (CNVD-2017-32910)

Lenovo Service Framework Android application is a special application for Lenovo products based on the Android platform from China Lenovo Lenovo Company. A security vulnerability exists in the Lenovo Service Framework Android application, which originates from the program failing to properly filt...

Lenovo VIBE, Moto, and ZUK Mobile Phone Remote Code Execution Vulnerability - Lenovo Support US

No description provided...

Improper access control

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...

Command injection

The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution...

Remote code execution

The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution...

CVE-2017-3760

The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution...