Samsung SMR SQL注入漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A SQL injection vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1. The vulnerability stems from a SQL injection vulnerability in the CMFA framework that allo...

Samsung SMR 缓冲区错误漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1, which originates from a heap-based buffer overflow in the DSP kernel driver that allows arbitra...

Samsung SMR 缓冲区错误漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to SMR Oct-2021 Release 1, which stems from the lack of buffer bounds checking in the livfivextractor library to allow OOB reads...

PT-2021-16660 · Unknown · Teegris Secure Os

Name of the Vulnerable Software and Affected Versions: TEEGRIS secure OS versions prior to SMR Oct-2021 Release 1 Description: The issue is related to an improper caller check logic of SMC call in the TEEGRIS secure OS, which can be used to compromise the Trusted Execution Environment TEE...

Samsung SMR 信息泄露漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1, which stems from an information disclosure in ipcdump, which allows an attacker to exploit the...

Samsung SMR 缓冲区错误漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung cell phone applications. A security vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1, which stems from a missing buffer boundary check in recvdata of the modem interface driver,...

October CMS 授权问题漏洞

October CMS is an open source content management system CMS based on PHP and the Laravel web application framework. October CMS suffers from an authorization issue vulnerability where a previously deleted administrator account may still be able to log into the backend using October CMS v2.0...

Samsung SMR 代码问题漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung cell phone applications. A security vulnerability exists in the mfc driver in versions prior to Samsung SMR Oct-2021 Release 1, which can lead to memory corruption...

Samsung SMR 授权问题漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1, which stems from incorrect authentication in InputManagerService...

PT-2021-16680 · Keymaster · Keymaster

Name of the Vulnerable Software and Affected Versions: keymaster versions prior to SMR Oct-2021 Release 1 Description: A keyblob downgrade attack in keymaster allows an attacker to trigger an IV reuse issue with a privileged process. Recommendations: For versions prior to SMR Oct-2021 Release 1,...

Samsung SMR 缓冲区错误漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1, which stems from a possible stack-based buffer overflow in the Exynos CP Chipset that allows...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Oct-2021 Release 1, which stems from a keyblob degradation attack in keymaster...

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1, which stems from information leakage in the Widevine TA logs, allowing an attacker to exploit t...

PT-2021-16662 · Unknown · Bluetoothsettingsprovider

Name of the Vulnerable Software and Affected Versions: BluetoothSettingsProvider versions prior to SMR Oct-2021 Release 1 Description: The issue is related to an improper access control vulnerability. This vulnerability allows an untrusted application to overwrite some Bluetooth information...

CVE-2021-41553

creationtimestamp| type| source ---|---|--- 2021-10-05 20:30:38+00:00| seen| https://t.me/cibsecurity/29996...

CVE-2021-35503

creationtimestamp| type| source ---|---|--- 2021-10-05 16:30:36+00:00| seen| https://t.me/cibsecurity/29965...

hdfs.hs.iastate.edu Improper Access Control vulnerability OBB-2157888

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

saltwatercentral.com Improper Access Control vulnerability OBB-2157557

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2021-41100

creationtimestamp| type| source ---|---|--- 2021-10-04 22:25:02+00:00| seen| https://t.me/cibsecurity/29925...

Holiday Readiness, Part Three: What you Should be Thinking About Two Months Out?Performance Optimizations

October is here, and that means we are less than two months away from the busiest weekend of the year. Parts one and two of the Holiday Readiness blog series covered topics ranging from security checklists to disaster recovery strategies and flash crowd management. If you haven?t had a chance to...