NewType Infortech NT OneAPP encryption issue vulnerability

NewType Infortech NT OneAPP versions 1.5.22 and earlier contain an encryption vulnerability. This vulnerability allows unauthenticated local attackers who obtain ADB backup access and confirm the backup process to extract plaintext usernames and passwords from the backup data, resulting in...

PT-2026-121263

NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local attackers can extract plaintext usernames and passwords from backup data after obtaining ADB backup access authorization and user confirmation of the backup, resulting in sensiti...

PT-2026-121259

NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login request contents, thereby obtaining users' plaintext account credentials and device information...

PT-2026-121262

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user...

PT-2026-121260

NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between...

NewType Infortech NT OneAPP trust management issue vulnerability

NewType Infortech NT OneAPP versions 1.5.22 and earlier contain a trust management vulnerability. This vulnerability stems from hard-coded credentials; unauthenticated remote attackers can obtain these hard-coded encryption keys and decrypt login request contents, thereby gaining users’ plaintext...

NewType Infortech NT OneAPP authorization issue vulnerability

NewType Infortech NT OneAPP versions 1.5.22 and earlier contain an authorization issue vulnerability. This vulnerability stems from authentication bypass; unauthenticated local attackers can use Deep Link to circumvent the App PIN lock mechanism, thereby gaining access to protected resources...

PT-2026-121261

NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can trigger an HTTP Basic Authentication challenge from an unvalidated source in the WebView under specific conditions, thereby obtaining the NUP Portal passcode of a logged-in use...

UBUNTU-CVE-2026-102485

Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control @@Gc reply with an out-of-range mode byte...

NewType Infortech NT OneAPP encryption issue vulnerability

NewType Infortech NT OneAPP versions 1.5.22 and earlier contain a vulnerability related to encryption issues. This vulnerability stems from improper certificate validation; it fails to verify both server certificates and hostnames. As a result, unauthenticated attackers on adjacent networks may...

NewType Infortech NT OneAPP trust management issue vulnerability

NewType Infortech NT OneAPP versions 1.5.22 and earlier contain a trust management vulnerability. This vulnerability arises because WebView fails to validate origins; as a result, an HTTP Basic Authentication query is triggered, potentially allowing unauthenticated remote attackers to obtain the...

Exploit for CVE-2017-0144

EternalBlue MS17-010 - One Open Port, One Old Windows 7 A...

CVE-2026-96542

Incorrect permission assignment CWE-732 in the standalone installer for EA Javelin Anticheat versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698 on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\SYSTEM by modifying the EAAntiCheatService servi...

EUVD-2026-103174

Incorrect permission assignment CWE-732 in the standalone installer for EA Javelin Anticheat versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698 on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\SYSTEM by modifying the EAAntiCheatService servi...

CVE-2026-96542 EA Javelin Anticheat Installer Local Privilege Escalation

Incorrect permission assignment CWE-732 in the standalone installer for EA Javelin Anticheat versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698 on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\SYSTEM by modifying the EAAntiCheatService servi...

CVE-2026-96542 EA Javelin Anticheat Installer Local Privilege Escalation

Incorrect permission assignment CWE-732 in the standalone installer for EA Javelin Anticheat versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698 on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\SYSTEM by modifying the EAAntiCheatService servi...

CVE-2026-96542

The EA Javelin Anticheat standalone installer on Windows contains an incorrect permission assignment (CWE-732 ) affecting versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698. A local non-administrative user can exploit this by manually executing the standalone installer to modify ...

PT-2026-116161

Name of the Vulnerable Software and Affected Versions EA Javelin Anticheat versions 1.0.14329371 through 1.0.14940698 Description Incorrect permission assignment in the standalone installer on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITYSYSTEM. This is...

CVE-2026-96542: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment CWE-732 in the standalone installer for EA Javelin Anticheat versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698 on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\SYSTEM by modifying the EAAntiCheatService servi...

Electronic Arts Javelin Anticheat Permission Licensing and Access Control Vulnerabilities

Electronic Arts Javelin Anticheat versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper permission allocation in the standalone installer. Local non-administrator users...