SAMSUNG Mobile devices 资源管理错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR May-2023 Release 1 prior to version 1, which stems from setPinPadImages in the mPOS TUI trustlet that allows a...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices version 2.1.00.36, which originated from allowing arbitrary files to be written i...

SAMSUNG Mobile devices 授权问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices SMR May-2023 Release 1 version, which stemmed from a telephony framework tha...

PT-2023-18246 · Samsung · Samsung Mobile Devices

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Devices affected versions not specified Description: The issue allows a privileged local attacker to bypass ASLR due to kernel pointers being printed in the log file prior to SMR May-2023 Release 1. This is related to the...

Samsung Mobile 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in Samsung Mobile SMR May-2023 Release 1 version, which stemmed from a call to VideoPreviewActivity in...

SAMSUNG Mobile devices 输入验证错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR May-2023 Release 1 prior to version 1, which stems from setPartnerTAInfo in the mPOS TUI trustlet that allows ...

Apple and Google Join Forces to Stop Unauthorized Location-Tracking Devices

Apple and Google have teamed up to work on a draft industry-wide specification that's designed to tackle safety risks and alert users when they are being tracked without their knowledge or permission using devices like AirTags. "The first-of-its-kind specification will allow Bluetooth...

BouldSpy Android Spyware: Iranian Government's Alleged Tool for Spying on Minority Groups

A new Android surveillanceware possibly used by the Iranian government has been used to spy on over 300 individuals belonging to minority groups. The malware, dubbed BouldSpy, has been attributed with moderate confidence to the Law Enforcement Command of the Islamic Republic of Iran FARAJA...

Qualcomm 芯片代码问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry mainly semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A security vulnerability exists in some Qualcomm products that ste...

MAL-2023-527 Malicious code in ing-orange-lu-luxtrust-oaw-mobile-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47e898a8d28683ffbebd031a0d10c1a1d610661c8b876689bdc85931ceda9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-2397

A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website 1.0. This issue affects some unknown processing of the file classes/Master.php?f=savefield. The manipulation of the argument Field Name leads to cross site scripting. The attack...

CVE-2023-2397

CVE-2023-2397 affects SourceCodester Simple Mobile Comparison Website 1.0. The vulnerability is an XSS issue in the endpoint classes/Master.php?f=save_field where the Field Name parameter can be manipulated to trigger cross-site scripting, potentially exploitable remotely. Public disclosure is no...

CVE-2023-2397 SourceCodester Simple Mobile Comparison Website cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website 1.0. This issue affects some unknown processing of the file classes/Master.php?f=savefield. The manipulation of the argument Field Name leads to cross site scripting. The attack...

Simple Mobile Comparison Website 跨站脚本漏洞

Simple Mobile Comparison Website is a mobile comparison website by Carlo Montero personal developer. It allows users to compare the specifications of smartphones. A cross-site scripting vulnerability exists in version 1.0 of Simple Mobile Comparison Website, which stems from cross-site scripting...

@21cnfe/onekit-mp-cli (2.0.1), @alitajs/aconsole (>=2.8.2, <=2.9.0) +36 more potentially affected by CVE-2023-30363 via vconsole (>=3.2.0, <=3.15.0)

vconsole NPM version =3.2.0, =2.8.2, =2.8.2, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.2, =0.0.8, =0.0.1, =0.1.0, =0.3.3 and more Source cves: CVE-2023-30363 Source advisory: OSV:GHSA-F737-3FH6-JF6W...

MAL-2023-1214 Malicious code in inter-mobile-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7202781ee0df940e4433cfd643ce8bca065164302e9a8ae33e2cda7590a6bdb6 The OpenSSF Package Analysis project identified 'inter-mobile-bridge' @ 1.0.8 npm as malicious. It is considered malicious because: - The packag...

mobile.ems.no Cross Site Scripting vulnerability OBB-3274323

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

4help-shared (>=1.0.8, <=1.0.15), @akalli/components (>=0.0.1, <=0.2.3) +245 more potentially affected by CVE-2023-28131 via expo (>=45.0.0, <=47.0.14)

expo NPM version =45.0.0, =1.0.8, =0.0.1, =0.0.1, =0.0.3, =2.5.0, =0.0.0, =1.2.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2023-28131 Source advisory: SNYK:JS-EXPO-13559201...

Mitel MiCollab Authentication Error Vulnerability

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. The Mitel MiCollab suffers from an authentication error vulnerability that stems from a faulty authentication control in the Web conferencing...

Vulnerabilities of operating systems iOS and iPadOS, related to lack of access control, allow attackers to gain unauthorized access to protected information.

The vulnerabilities of operating systems iOS and iPadOS are related to lack of access control. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information through special features...