CVE-2023-21292

In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21292

In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21292

In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21292

In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-18071 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the August 2023 ASB Description: The issue is related to a confused deputy in the openContentUri method of ActivityManagerService.java, allowing a third-party app to obtain restricted files. This could lead to local...

ASB-A-236688380

In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-3966 · Fortinet · Fortiextender

Name of the Vulnerable Software and Affected Versions: FortiExtender versions 3.2.1 through 3.2.3 FortiExtender versions 3.3.0 through 3.3.2 FortiExtender versions 4.0.0 through 4.0.2 FortiExtender versions 4.1.1 through 4.1.8 FortiExtender versions 4.2.0 through 4.2.4 FortiExtender versions 5.3...

The vulnerability of the Telegram Messenger messaging application for the macOS operating system, related to access control deficiencies, allows a hacker to gain access to files with restricted access, the microphone, and screen recordings.

The vulnerability of the Telegram Messenger messaging app is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to files with restricted access, as well as the microphone...

CVE-2023-26818

Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLDINSERTLIBRARIES flag...

CVE-2023-26818

Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLDINSERTLIBRARIES flag...

Design/Logic Flaw

Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLDINSERTLIBRARIES flag...

CVE-2023-26818

Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLDINSERTLIBRARIES flag...

Telegram 安全漏洞

Telegram is an instant messaging mobile application. A security vulnerability exists in Telegram versions 9.3.1, 9.4.0, which stems from a problem with the DYLDINSERTLIBRARIES flag, which can be exploited by an attacker to gain access to restricted files, microphones, or video recordings...

Cisco Identity Services Engine 安全漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. An authorization bypass vulnerability exists in...

CVE-2023-24544

Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a result, the product settings may be altered. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier,...

SUSE CVE-2007-6199

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy...

SUSE CVE-2011-0523

gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified vectors...

SUSE CVE-2016-8642

In Moodle 2.x and 3.x, the question engine allows access to files that should not be available...

PT-2023-3022 · Telegram · Telegram

Name of the Vulnerable Software and Affected Versions: Telegram versions 9.3.1 through 9.4.0 Description: The issue is related to insufficient access control in Telegram, allowing remote attackers to access restricted files, the microphone, or video recording. This is achieved via the DYLD INSERT...

CVE-2022-41720

A flaw was found in OS, net/http golang library. In Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted in a given directory. These functions permit access to Windows device files under that root. Fo...