CVE-2020-12745: Missing Authorization

An issue was discovered on Samsung mobile devices with Q10.0 software. Attackers can bypass the locked-state protection mechanism and access clipboard content via USSD. The Samsung ID is SVE-2019-16556 May 2020...

CVE-2020-12748: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with Q10.0 software. Attackers can bypass the locked-state protection mechanism and designate a different preferred SIM card. The Samsung ID is SVE-2020-16594 May 2020...

PT-2020-13239

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 software Description An issue allows attackers to bypass the locked-state protection mechanism and designate a different preferred SIM card. Recommendations For Samsung mobile devices with Q10.0 software, at t...

PHP-Fusion 9.03.50 Cross Site Scripting

Exploit Title: php-fusion 9.03.50 - Persistent Cross-Site Scripting Google Dork: "php-fusion" Date: 2020-04-30 Exploit Author: SunCSR Sun Cyber Security Research Vendor Homepage: https://www.php-fusion.co.uk/ Software Link: https://www.php-fusion.co.uk/infusions/downloads/downloads.php?catid=30...

q-files.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1151189 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Design/Logic Flaw

In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbitrary command on the server using this malicious file...

CVE-2020-11607

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Notification exposure occurs in Lockdown mode because of the Edge Lighting application. The Samsung ID is SVE-2020-16680 April 2020...

CVE-2020-11600

An issue was discovered on Samsung mobile devices with Q10.0 software. There is arbitrary code execution in the Fingerprint Trustlet via a memory overwrite. The Samsung IDs are SVE-2019-16587, SVE-2019-16588, SVE-2019-16589 April 2020...

CVE-2020-11606

An issue was discovered on Samsung mobile devices with Q10.0 software. Information about application preview in the Secure Folder leaks on a locked device. The Samsung ID is SVE-2019-16463 April 2020...

CVE-2020-11606

An issue was discovered on Samsung mobile devices with Q10.0 software. Information about application preview in the Secure Folder leaks on a locked device. The Samsung ID is SVE-2019-16463 April 2020...

CVE-2020-11600

An issue was discovered on Samsung mobile devices with Q10.0 software. There is arbitrary code execution in the Fingerprint Trustlet via a memory overwrite. The Samsung IDs are SVE-2019-16587, SVE-2019-16588, SVE-2019-16589 April 2020...

CVE-2020-11604

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 incorporating TEEGRIS software. There is an Out-of-bounds read in the MLDAP Trustlet. The Samsung ID is SVE-2019-16565 April 2020...

Code injection

An issue was discovered on Samsung mobile devices with Q10.0 software. There is arbitrary code execution in the Fingerprint Trustlet via a memory overwrite. The Samsung IDs are SVE-2019-16587, SVE-2019-16588, SVE-2019-16589 April 2020...

Information disclosure

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. There is sensitive information exposure from dumpstate in NFC logs. The Samsung ID is SVE-2019-16359 April 2020...

Information disclosure

An issue was discovered on Samsung mobile devices with Q10.0 software. Information about application preview in the Secure Folder leaks on a locked device. The Samsung ID is SVE-2019-16463 April 2020...

CVE-2020-11603

CVE-2020-11603 affects Samsung mobile devices running P(9.0) and Q(10.0) that include TEEGRIS. The issue is a type confusion in the MLDAP Trustlet, leading to arbitrary code execution. The vulnerability is identified by Samsung as SVE-2020-16599 (April 2020). Exploitation details, affected versio...

CVE-2020-11607

CVE-2020-11607 concerns Samsung mobile devices running P(9.0)/Q(10.0). The issue is a notification exposure in Lockdown mode caused by the Edge Lighting application, enabling potential information disclosure. Affected component: Edge Lighting on affected Samsung firmware. Root cause: not explicit...

CVE-2020-11606

An issue was discovered on Samsung mobile devices with Q10.0 software. Information about application preview in the Secure Folder leaks on a locked device. The Samsung ID is SVE-2019-16463 April 2020...

CVE-2020-11606

The CVE-2020-11606 entry concerns Samsung mobile devices running Q (10.0). Affected component is information exposure within the Secure Folder’s application preview on a locked device, leading to partial confidentiality impact. The root cause and exact vulnerable code path are not detailed in the...

CVE-2020-11604

CVE-2020-11604 affects Samsung mobile devices running P (9.0) and Q (10.0) with TEEGRIS; the issue is an out-of-bounds read in the MLDAP Trustlet. Connected records confirm the vulnerability details and Samsung’s reference ID SVE-2019-16565. Impact details across sources indicate leakage of infor...