CVE-2024-49736

In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49736

In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49736

Google Android is affected by a denial-of-service vulnerability caused by a logic error in the MainClear.java file. An attacker can exploit this error to trigger a factory reset without explicit user consent. This attack requires no additional execution privileges and does not require user intera...

CVE-2024-6466

NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 allows an attacker to reset configurations or restart products via network with X-FRAME-OPTIONS is not specified...

CVE-2024-6466

NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 allows an attacker to reset configurations or restart products via network with X-FRAME-OPTIONS is not specified...

CVE-2024-6466

NEC Corporation's WebSAM DeploymentManager (versions v6.0 to v6.80 ) is vulnerable to a Clickjacking attack because the X-FRAME-OPTIONS header is not specified. This flaw allows a network-based attacker to trick users into performing actions that could reset configurations or restart products . A...

CVE-2024-6466

NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 allows an attacker to reset configurations or restart products via network with X-FRAME-OPTIONS is not specified...

CVE-2023-37025: NULL Pointer Dereference

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP Reset packet missing an expected ResetType field...

CVE-2024-49736: Operator Precedence Logic Error

In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-37025

Magma MME contains a null pointer dereference in versions <= 1.8.0 that allows network-adjacent attackers to crash the MME by sending an S1AP Reset packet missing an expected ResetType field. The issue is fixed in Magma v1.9 (commit 08472ba98b8321f802e95f5622fa90fec2dea486). Affected product: ...

PT-2025-1417 · Magma · Magma

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A Null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "Reset" packet missing an expected ResetType field...

CVE-2023-37025

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP Reset packet missing an expected ResetType field...

CVE-2024-6466: Improper Restriction of Rendered UI Layers or Frames

NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 allows an attacker to reset configurations or restart products via network with X-FRAME-OPTIONS is not specified...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial-of-service vulnerability, which stems from a code logic error that can be exploited by an attacker to trigger a factory reset without the user's consent, resulting in a denial of service...

PT-2025-2851 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: A logic error in the code of MainClear.java allows for a possible factory reset without explicit user consent. This could lead to a local denial of...

CVE-2025-0578

A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argument reterros leads to cross site scripting. It i...

CVE-2025-0578

CVE-2025-0578 affects Facile Sistemas Cloud Apps (up to 20250107), specifically the Password Reset Handler’s /account/forgotpassword function. The issue is a cross-site scripting vulnerability caused by manipulating the reterros parameter, allowing remote exploitation. Public exploits have been d...

CVE-2025-0578 Facile Sistemas Cloud Apps Password Reset forgotpassword cross site scripting

A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argument reterros leads to cross site scripting. It i...

CVE-2025-0578 Facile Sistemas Cloud Apps Password Reset forgotpassword cross site scripting

A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argument reterros leads to cross site scripting. It i...

CVE-2025-0578: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argument reterros leads to cross site scripting. It i...