WiFi Mouse 1.7.8.5 - Remote Code Execution Exploit (2)

Exploit Title: WiFi Mouse 1.7.8.5 - Remote Code Execution Author: H4rk3nz0 Vendor Homepage: http://necta.us/ Software Link: http://wifimouse.necta.us/download Version: 1.7.8.5 Tested on: Windows Enterprise Build 17763 ​ Python 3 port done by RedHatAugust Original exploit:...

CVE-2022-1955

Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation...

CVE-2022-1955

Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation...

CVE-2022-1955

Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation...

PT-2022-14215

Name of the Vulnerable Software and Affected Versions Session version 1.13.0 Description The issue allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to a lack of adequate security controls to...

CVE-2022-1955: Improper Authentication

Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation...

GSD-2022-1003045 arm64: dts: qcom: sc7280-idp: Configure CTS pin to bias-bus-hold for bluetooth

arm64: dts: qcom: sc7280-idp: Configure CTS pin to bias-bus-hold for bluetooth This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commi...

PT-2022-30981

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns a configuration setting in the Linux Kernel for arm64 devices, specifically the sc7280-qcard, related to the CTS pin for Bluetooth. The actual impact and potential for attac...

PT-2022-31308

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns a configuration problem with the CTS pin for Bluetooth on the sc7280-idp, which could potentially lead to security vulnerabilities. The actual impact and likelihood of an...

PT-2022-30986

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns a configuration problem with the CTS pin for Bluetooth on the sc7280-idp, which could potentially lead to security vulnerabilities. The actual impact and attack plausibility...

Malicious code in cspell-version-pin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ba477905880cb580e8ffef86d2d00cd88679fd54e7d13e2a1068b02b3b21c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2266 Malicious code in cspell-version-pin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ba477905880cb580e8ffef86d2d00cd88679fd54e7d13e2a1068b02b3b21c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Forging Australian Driver’s Licenses

The New South Wales digital drivers license has multiple implementation flaws that allow for easy forgeries. This file is encrypted using AES-256-CBC encryption combined with Base64 encoding. A 4-digit application PIN which gets set during the initial onboarding when a user first instals the...

PT-2022-36999

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the following functions: sc build pin, isoNUMBER build pin apdu, and isoNUMBER pi...

new packages: clevis-pin-tpm2

An update is available for clevis-pin-tpm2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

OSV-2022-386 Invalid-free in change_pin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47143 Crash type: Invalid-free Crash state: changepin main fuzzpkcs15tool.c...

PT-2022-36972

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Invalid-free. The crash state includes functions such as change pin and main, and it is associated with...

Google Android elevation of privilege vulnerability (CNVD-2022-43233)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from a lack of privilege checking in TBD's TBD, which can be exploited to bypass PIN validation to access PIN-protected settings. An attacker...

PT-2022-29894

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the pinctrl subsystem in the Linux Kernel, specifically affecting Samsung pin banks. It involves dropping pin banks references on error paths. The actual impact and...

PT-2022-30199

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the pinctrl subsystem in the Linux Kernel, specifically affecting Samsung pin banks. It involves dropping pin banks references on error paths. The actual impact and...