CVE-2021-25441

CVE-2021-25441 describes an improper input validation vulnerability in Samsung’s AR Emoji Editor. According to the sources, versions prior to 4.4.03.5 on Android Q (10.0) and newer are affected. The flaw permits untrusted applications to access arbitrary files with escalated privileges, indicatin...

CVE-2021-25441

Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q10.0 and above allows untrusted applications to access arbitrary files with an escalated privilege...

Akamai Helps Q-dance Bring Its Tribe to Defqon.1 at Home -- a Global Virtual Festival Experience

Every year, Q-dance part of the ID&T group, a Dutch electronic music experience company, delights its die-hard fans or their "tribe" at the world's largest hardstyle festival, Defqon.1. Helicopters, simulated earthquakes, special moments like Power Hour, and amazing shows make up the unique...

CVE-2021-25441: Improper Input Validation

Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q10.0 and above allows untrusted applications to access arbitrary files with an escalated privilege...

PT-2021-16632

Name of the Vulnerable Software and Affected Versions: AR Emoji Editor versions prior to 4.4.03.5 Description: The issue is related to improper input validation, allowing untrusted applications to access arbitrary files with escalated privilege. This affects devices running Android Q 10.0 and...

CVE-2021-28803

This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004...

CVE-2021-31505

This vulnerability allows attackers with physical access to escalate privileges on affected installations of Arlo Q Plus 1.9.0.3278. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSH service. The device can be booted into a special operation mod...

CVE-2021-31505

This vulnerability allows attackers with physical access to escalate privileges on affected installations of Arlo Q Plus 1.9.0.3278. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSH service. The device can be booted into a special operation mod...

Hardcoded credentials

This vulnerability allows attackers with physical access to escalate privileges on affected installations of Arlo Q Plus 1.9.0.3278. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSH service. The device can be booted into a special operation mod...

CVE-2021-31505

This vulnerability allows attackers with physical access to escalate privileges on affected installations of Arlo Q Plus 1.9.0.3278. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSH service. The device can be booted into a special operation mod...

CVE-2021-31505

This vulnerability allows attackers with physical access to escalate privileges on affected installations of Arlo Q Plus 1.9.0.3278. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSH service. The device can be booted into a special operation mod...

CVE-2021-31505

The CVE-2021-31505 entry affects Arlo Q Plus with firmware 1.9.0.3_278, where attackers with physical access can escalate privileges via the SSH service. The vulnerability allows the device to boot into a special operation mode that accepts hard-coded SSH credentials, enabling privilege escalatio...

CVE-2021-31505: Use of Hard-coded Credentials

This vulnerability allows attackers with physical access to escalate privileges on affected installations of Arlo Q Plus 1.9.0.3278. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSH service. The device can be booted into a special operation mod...

Arlo Q Plus Trust Management Issue Vulnerability

Arlo Q Plus is a smart security camera from Arlo U.S.A. The Arlo Q Plus is vulnerable to a trust management issue that could be exploited by an attacker to escalate privileges and execute arbitrary code in the root context...

CVE-2020-22200

Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to publicgetsuggestkeyword...

CVE-2020-22200: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to publicgetsuggestkeyword...

PT-2021-10744

Name of the Vulnerable Software and Affected Versions phpCMS version 9.1.13 Description The issue is related to a Directory Traversal vulnerability. It can be exploited via the q parameter to the "public get suggest keyword" endpoint. Recommendations For phpCMS version 9.1.13, consider restrictin...

Arlo Q Plus 信任管理问题漏洞

Arlo Q Plus is a smart security camera from Arlo U.S.A. The Arlo Q Plus is vulnerable to a trust management issue that could be exploited by an attacker to escalate privileges and execute arbitrary code in the root context...

PT-2021-19388

Name of the Vulnerable Software and Affected Versions Arlo Q Plus version 1.9.0.3 278 Description This issue allows attackers with physical access to escalate privileges on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the SSH servic...

CVE-2021-25403

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P9.0 and below, and 12.2.0.9 in Android Q10.0 and above allows attacker to access contacts and file provider using SettingWebView component...