5784 matches found
The vulnerability of the ImageCast X ballot marking device’s software lies in the improper protection of an alternative path, allowing a hacker to load the Android Safe Mode and execute arbitrary code.
The vulnerability of the ImageCast X ballot marking device’s software is related to improper protection of an alternative path. Exploiting this vulnerability allows a hacker to load the Android Safe Mode and execute arbitrary code...
GSD-2022-1003139 printk: wake waiters for safe and NMI contexts
printk: wake waiters for safe and NMI contexts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...
GSD-2022-1002792 printk: wake waiters for safe and NMI contexts
printk: wake waiters for safe and NMI contexts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...
The vulnerability of Google Chrome and Microsoft Edge browsers’ Safe Browsing service allows a hacker to expose protected information.
The vulnerability of Google Chrome and Microsoft Edge browsers’ Safe Browsing service is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to expose protected information through a specially created web page...
CVE-2022-1742
The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...
CVE-2022-1742
The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...
Code injection
The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...
CVE-2022-1742
The CVE-2022-1742 issue affects Dominion Voting Systems ImageCast X. It is tracked under CWE-424 (IMPROPER PROTECTION OF ALTERNATE PATH) and enables rebooting into Android Safe Mode, allowing direct OS access and potential privilege escalation with the risk of installing malicious code. The NVD/C...
CVE-2022-1742 2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424
The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...
CVE-2022-1742 2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424
The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...
TrelloC2 - Simple C2 Over The Trello API
Simple C2 over Trello's API Proof-of-Concept By: Fabrizio Siciliano @0rbz Update 12/30/2019 Removed hardcoded API key and Token, use input instead. Requirements Python 3.x Setup 1. Create a Trello account: https://trello.com/signup 2. Once logged in, get your API key: https://trello.com/app-key 3...
The vulnerability of the Yandex Browser’s Safe WiFi technology, which allows a hacker to expose protected information.
The vulnerability of the Safe WiFi technology of the Yandex Browser is related to resource release errors. Exploiting this vulnerability can allow a remote attacker to disclose protected information...
Malicious code in zapper-safe-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 495bd3e37673abdb06af5a1310c84c8b7060d98e00ee42e12ab3811cb05814f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7376 Malicious code in zapper-safe-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 495bd3e37673abdb06af5a1310c84c8b7060d98e00ee42e12ab3811cb05814f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Upgraded Q -> M from 270 [1655579826704]
Judge has assessed an item in Issue 270 as Medium risk. The relevant finding follows: Gas stipend for payable.send may be too low for contract wallets ETH withdrawals in both the minter and token contracts use payableaddress.send to transfer ether to the vault address. If the configured vault is ...
GHSA-3JCH-9QGP-4844 Generated code can read and write out of bounds in safe code
Code generated by flatbuffers' compiler is unsafe but not marked as such. See https://github.com/google/flatbuffers/issues/6627 for details. All users that use generated code by flatbuffers compiler are recommended to: 1. not expose flatbuffer generated code as part of their public APIs 2. audit...
Arrow2 allows double free in `safe` code
The struct FfiArrowArray implements deriveClone that is inconsistent with its custom implementation of Drop, resulting in a double free when cloned. Cloning this struct in safe results in a segmentation fault, which is unsound. This derive was removed from this struct. All users are advised to...
GHSA-5J8W-R7G8-5472 Arrow2 allows double free in `safe` code
The struct FfiArrowArray implements deriveClone that is inconsistent with its custom implementation of Drop, resulting in a double free when cloned. Cloning this struct in safe results in a segmentation fault, which is unsound. This derive was removed from this struct. All users are advised to...
`DecimalArray` does not perform bound checks on accessing values and offsets
DecimalArray performs insufficient bounds checks, which allows out-of-bounds reads in safe code if the lenght of the backing buffer is not a multiple of 16...