Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware

CVE-2023-20198 An Exploitation script developed to exploit the...

Google Android Denial of Service Vulnerability (CNVD-2023-98749)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability, which is caused by a privilege bypass in Usage Access. An attacker can exploit this vulnerability to cause a denial of service...

Google Android Information Disclosure Vulnerability (CNVD-2024-01368)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to a privilege bypass flaw in the Bluetooth component. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android Information Disclosure Vulnerability (CNVD-2023-98752)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by a privilege bypass in settings. An attacker can exploit the vulnerability to obtain sensitive information...

Google Android elevation of privilege vulnerability (CNVD-2024-05388)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a privilege bypass in onCreate of ApnEditor.java. An attacker can exploit this vulnerability to gain elevated privileges...

CloudExplorer Lite License Issue Vulnerability

CloudExplorer Lite is CloudExplorer's platform that provides out-of-the-box basic functionality for cloud hosting management, cloud billing, operational analytics, and security compliance, as well as powerful extensibility to meet the customization needs of enterprises. An authorization issue...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability, which is caused by a privilege bypass in Usage Access. An attacker can exploit this vulnerability to cause a denial of service...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by a privilege bypass in settings. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2023-40120

CVE-2023-40120 is an Android elevation-of-privilege issue caused by improper input validation in multiple locations that bypasses user notification of foreground services. The vulnerability enables local escalation of privilege with no user interaction and is exploitable with local access. Public...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from a TBD component privilege bypass that has a possible way to access location information. This could lead to the disclosure of local information that requires system...

CVE-2023-32821

CVE-2023-32821 relates to MediaTek chips where a vulnerability in the video module allows an out-of-bounds write due to a permissions bypass. This could enable local escalation to SYSTEM privileges without user interaction. A patch is identified as ALPS08013430 (Issue ALPS08013433). Exploitation ...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in the MediaTek chips, which stems from a video module privilege bypass that could result in out-of-bounds writes...

Google Wear OS Security Vulnerability

Google Wear OS is a Google-developed operating system from Google, Inc. in the United States, designed specifically for use in smartwatches, smart bands, and other wearable devices. Google Wear OS has a security vulnerability that stems from the presence of privilege bypass in multiple locations,...

Google Wear OS Security Vulnerability

Google Wear OS is a Google-developed operating system from Google, Inc. designed for use in smartwatches, smart bands, and other wearable devices. Google Wear OS suffers from a security vulnerability that stems from a privilege bypass of the onCreate module of LockSettingsActivity.java, with a...

Apache Airflow Security Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is characterized by scalability and dynamic monitoring. Apache Airflow versions prior to 2.6.0 have a security vulnerability that stems from a...

Smartbi setEngineAddress Privilege Bypass Vulnerability

Smartbi is a one-stop big data analytics platform. Smartbi setEngineAddress there is a privilege bypass vulnerability, the vulnerability is due to the setEngineAddress interface is not authorized, unauthorized remote attacker can use the vulnerability to obtain the administrator Token, so as to...

CVE-2023-21184

In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from onCreate in DataUsageSummary.java, where a user may bypass privilege restrictions and enable or disable mobile data, which may result in a local privilege...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a privilege bypass in multiple functions of the WifiCallingSettings.java file, with a possible way to change the calling preferences of an administrator user...

CVE-2023-35168

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. Affected versions of DataEase has a privilege bypass vulnerability where ordinary users can gain access to the user database. Exposed information includes md5 hashes of passwords,...