6788 matches found
CVE-2022-39007
The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation...
Privilege escalation
The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation...
CVE-2022-39007
The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation...
CVE-2022-39007
The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation...
CVE-2022-39007
CVE-2022-39007 affects Huawei HarmonyOS Location module. Root cause: insufficient checksum of the Location module privilege, enabling bypass of permission verification and potential elevation of privilege. Impact: privilege escalation, high risk per records. No fix/version in documents; monitor f...
mangadex-downloader vulnerable to unauthorized file reading
Impact When using file: command and is web URL location http, https. mangadex-downloader will try to open and read a file in local disk if the content from online file is exist-as-a-file in victim computer So far, the app only read the files and not execute it. But still, when someone reading you...
PT-2022-24664 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: Location module affected versions not specified Description: The issue concerns a vulnerability in the location module that allows bypassing permission verification, potentially leading to privilege escalation. Recommendations: At the moment,...
Adobe Photoshop Multiple Vulnerabilities (APSB21-109) - Windows
Adobe Photoshop is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The privacy concerns of tying SIM cards to real identities
The registration of SIM cards tied to a verified identity is back in the news, off the back of large-scale phone fraud. In what some may call a knee-jerk response to a problem, there are calls to revive a legal bill and make it law. Whats happening, and what are the potential ramifications? Hitti...
PT-2022-24429 · Lief · Lief
Name of the Vulnerable Software and Affected Versions: LIEF version 365a16a Description: A segmentation violation was discovered in LIEF via the component CoreFile.tcc:69. Recommendations: For LIEF version 365a16a, apply the patch available at commit ca938740264f1fcb18f91cba8e4039c518ecb75b...
PT-2022-26606 · Apple · Macos Monterey +3
Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.7 macOS Monterey versions prior to 12.6 macOS Ventura versions prior to 13 Description: An access issue was addressed with improved access restrictions, allowing an app to potentially read sensitive location...
Apple macOS Big Sur 安全漏洞
Apple macOS Big Sur is the 17th major version of Apple's macOS, the operating system used by Apple Inc. for MACs in the United States. A security vulnerability exists in Apple macOS Big Sur versions prior to 11.7, which stems from the fact that applications may be able to read sensitive location...
Hauk 信任管理问题漏洞
Hauk is a fully open source, self-hosted location sharing service from the individual developer Marius Lindvall. A security vulnerability exists in Hauk v1.6.1, which stems from hardcoded passwords stored in plaintext in the config.php file on the server side and on the android client device...
Huawei HarmonyOS Elevation of Privilege Vulnerability (CNVD-2022-64985)
Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. An elevation of privilege vulnerability exists in Huawei HarmonyOS, which stems from insufficient checksum of the Location module privilege. An attacker could...
PT-2022-23171 · Unknown · Mangadex-Downloader
Name of the Vulnerable Software and Affected Versions: mangadex-downloader versions 1.3.0 through 1.7.2 Description: The issue occurs when using the file: command with a web URL location, causing the mangadex-downloader to attempt to open and read a file on the local disk for each line of website...
GoCD 安全漏洞
GoCD is a continuous delivery server. A security vulnerability exists in GoCD versions prior to 22.2.0 that stems from a Windows installation performed by a server or proxy installer that does not sufficiently restrict permissions when installed outside of the default location, which could allow ...
September 6, 2022, update for Excel 2013 (KB5002268)
September 6, 2022, update for Excel 2013 KB5002268 This article describes update 5002268 for Microsoft Excel 2013 that was released on September 6, 2022. This update also applies to Office Home and Student 2013 RT.Be aware that the update in the Microsoft Download Center applies to the Microsoft...
A week in security (August 29 - September 4)
Last week on Malwarebytes Labs: Twilio data breach turns out to be more elaborate than suspected Playing Doom on a John Deere tractor with Sick Codes: Lock and Code S03E18 Chromium browsers can write to the system clipboard without your permission British Airways customers targeted in lost luggag...
Huawei HarmonyOS 授权问题漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. An elevation of privilege vulnerability exists in Huawei HarmonyOS, which stems from insufficient checksum of the Location module privilege. An attacker could...
