Lucene search
+L

69 matches found

Positive Technologies
Positive Technologies
•added 2026/07/11 12:00 a.m.•21 views

PT-2026-57462

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...

6.9AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/11 12:00 a.m.•35 views

PT-2026-57478

A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...

8.4CVSS7.6AI score0.00386EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
•added 2026/07/11 12:00 a.m.•25 views

PT-2026-57468

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description In the onCreate function of ContactsPickerActivity.kt, a tapjacking or overlay attack can create a misleading user interface. This issue allows for local...

3.3CVSS6.6AI score0.00083EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/11 12:00 a.m.•21 views

PT-2026-57473

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in multiple functions of XmpDataParser.java causes improper data sanitization. This issue allows for local information disclosure without requiring...

3.3CVSS6.7AI score0.00092EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/11 12:00 a.m.•20 views

PT-2026-57463

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the resolveActivity function within ActivityStarter.java allows for Intent Redirection attacks. This issue enables local escalation of privileg...

7.8CVSS6.7AI score0.00101EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•48 views

PT-2026-57083

Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information...

6.9CVSS6.1AI score0.00151EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2026/02/18 12:00 a.m.•188 views

📄 Samsung QuramDNG Type Confusion Detector Vulnerability Scanner

This C++ scanner analyzes DNG Digital Negative files for the CVE-2025-58478 type confusion vulnerability in the libimagecodec.quram.so library used on Samsung devices...

7.5CVSS5.5AI score0.00258EPSS
SaveExploits2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2016-3639

Malware in sbrugna...

7.6CVSS6.7AI score0.23392EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2016-10791

Malware in sbrugna...

8.6CVSS6.4AI score0.00928EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2015-3479

Malware in sbrugna...

10CVSS6.3AI score0.10236EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2015-1633

Malware in sbrugna...

8.5CVSS7.8AI score0.01389EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2022-33217

Malicious code in bioql PyPI...

4.4CVSS4.8AI score0.00246EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-39530

Malicious code in bioql PyPI...

6.2CVSS5.8AI score0.00177EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/27 4:14 p.m.•30 views

CVE-2016-15046

A client-side remote code execution vulnerability exists in Hanwha Techwin Smart Security Manager SSM versions 1.32 and 1.4, due to improper restrictions on the PUT method exposed by the bundled Apache ActiveMQ instance running on port 8161. An attacker can exploit this flaw through a Cross-Origi...

8.6CVSS7.5AI score0.00928EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/25 4:15 p.m.•20 views

CVE-2016-15046

A client-side remote code execution vulnerability exists in Hanwha Techwin Smart Security Manager SSM versions 1.32 and 1.4, due to improper restrictions on the PUT method exposed by the bundled Apache ActiveMQ instance running on port 8161. An attacker can exploit this flaw through a Cross-Origi...

8.6CVSS0.00928EPSS
SaveExploits0References6
CVE
CVE
•added 2025/07/25 3:53 p.m.•36 views

CVE-2016-15046

CVE-2016-15046 affects Hanwha Techwin Smart Security Manager (SSM) / Hanwha Wisenet SSM, with a client-side RCE caused by improper restrictions on the PUT method of the bundled Apache ActiveMQ on port 8161. The vulnerability enables a Cross-Origin Resource Sharing (CORS) bypass paired with JavaSc...

8.6CVSS7.5AI score0.00928EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/07/25 3:53 p.m.•31 views

CVE-2016-15046 Hanwha Techwin SSM 1.32 & 1.4 ActiveMQ File Upload RCE

A client-side remote code execution vulnerability exists in Hanwha Techwin Smart Security Manager SSM versions 1.32 and 1.4, due to improper restrictions on the PUT method exposed by the bundled Apache ActiveMQ instance running on port 8161. An attacker can exploit this flaw through a Cross-Origi...

8.6CVSS0.00928EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/07/25 12:00 a.m.•15 views

SAMSUNG Security Manager 安全漏洞

SAMSUNG Security Manager is a software from Samsung South Korea for managing Samsung security drives. A security vulnerability exists in SAMSUNG Security Manager version 1.32 and 1.4, which stems from an improperly restricted PUT method that could lead to remote code execution...

8.6CVSS7.8AI score0.00928EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/06/04 12:00 a.m.•21 views

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in versions prior to SAMSUNG SMR Jun-2025 Release 1, which stems from improper export of Android application components and...

5.1CVSS6AI score0.00132EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:10 a.m.•16 views

CVE-2022-36830

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent...

6.2CVSS6.7AI score0.00177EPSS
SaveExploits0References1
Rows per page
Query Builder