CVE-2022-22263

The CVE-2022-22263 issue affects Samsung SecSettings: an unprotected dynamic receiver in SecSettings allows untrusted apps to launch arbitrary activities due to a privilege misconfiguration. This is tied to the Samsung SMR Jan-2022 Release 1 update and has been referenced in multiple sources (inc...

PT-2022-15309

Name of the Vulnerable Software and Affected Versions SecSettings versions prior to SMR Jan-2022 Release 1 Description The issue concerns an unprotected dynamic receiver in SecSettings, which allows untrusted applications to launch arbitrary activity. Recommendations For versions prior to SMR...

CVE-2022-22263: Improper Privilege Management

Unprotected dynamic receiver in SecSettings prior to SMR Jan-2022 Release 1 allows untrusted applications to launch arbitrary activity...

CVE-2021-45917

The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery SSRF attack on another agent computer,...

PT-2022-12467

Name of the Vulnerable Software and Affected Versions Shockwall system affected versions not specified Description The server-request receiver function of the system has an improper authentication issue. An authenticated attacker within the local area network can use local registry information to...

CVE-2021-45917: Improper Authentication

The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery SSRF attack on another agent computer,...

Malicious receiver can make distribute function denial of service

Handle cccz Vulnerability details Impact In the NFTXSimpleFeeDistributor.sol contract, the distribute function calls the sendForReceiver function to distribute the fee function distributeuint256 vaultId external override virtual nonReentrant requirenftxVaultFactory != address0; address vault =...

The return value of the _sendForReceiver function is not set, causing the receiver to receive more fees

Handle cccz Vulnerability details Impact In the NFTXSimpleFeeDistributor.sol contract, the distribute function is used to distribute the fee, and the distribute function judges whether the fee is sent successfully according to the return value of the sendForReceiver function. function...

CVE-2021-43248

Windows Digital Media Receiver Elevation of Privilege Vulnerability...

CVE-2021-43248

Windows Digital Media Receiver Elevation of Privilege Vulnerability...

Privilege escalation

Windows Digital Media Receiver Elevation of Privilege Vulnerability...

CVE-2021-43248 Windows Digital Media Receiver Elevation of Privilege Vulnerability

...

CVE-2021-43248 Windows Digital Media Receiver Elevation of Privilege Vulnerability

...

CVE-2021-43248

Technical details for CVE-2021-43248 are not publicly available in the provided documents; monitor for updates.

CVE-2021-43248: Undefined Security Weakness

Windows Digital Media Receiver Elevation of Privilege Vulnerability...

Windows Digital Media Receiver Elevation of Privilege Vulnerability

...

PT-2021-6348

Name of the Vulnerable Software and Affected Versions Windows Digital Media Receiver affected versions not specified Description The issue is related to insecure privilege management in the Windows Digital Media Receiver component of the Windows operating system. Exploitation of this issue may...

PT-2022-15337

Name of the Vulnerable Software and Affected Versions Telecom versions prior to SMR Feb-2022 Release 1 Description The issue concerns an unprotected dynamic receiver that allows untrusted applications to launch arbitrary activity. This could potentially be exploited to hack Samsung Android device...

Data race when sending and receiving after closing a `oneshot` channel

If a tokio::sync::oneshot channel is closed via the oneshot::Receiver::close method, a data race may occur if the oneshot::Sender::send method is called while the corresponding oneshot::Receiver is awaited or calling tryrecv. When these methods are called concurrently on a closed channel, the two...

PT-2021-24284 · Tokio +2 · Tokio +2

Name of the Vulnerable Software and Affected Versions: tokio crate versions 1.8.4 and earlier tokio crate versions 1.9.x through 1.13.x before 1.13.1 Description: An issue in the tokio crate for Rust can cause a data race and memory corruption in certain circumstances involving a closed oneshot...