8169 matches found
CVE-2024-43764
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43764: Undefined Security Weakness
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43764
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43764
A high-severity elevation of privilege vulnerability exists in the Framework component of Google Android . The issue stems from the onPrimaryClipChanged method in ClipboardListener.java, which could allow an attacker to partially bypass the lock screen . Exploitation requires no additional execut...
CVE-2024-43764
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2025-20831
Name of the Vulnerable Software and Affected Versions screen affected versions not specified Description The issue allows any user on the system to connect to the screen session for a short time, as the PTY is set to mode 666. Recommendations At the moment, there is no information about a newer...
PT-2025-20832
Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns file existence tests via socket lookup error messages, potentially affecting the screen package in Debian Linux. No information is provided about the estimated numbe...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices, which stems from a failure in the bootloader protection mechanism, allowing a physical...
Malicious Package
Overview zebo is a malicious package. This package steals information from the victim by logging keystrokes and taking screen captures, which are exfiltrated to a server under the attacker's control. Remediation Avoid using all malicious instances of the zebo package. References - Fortinet Report...
CVE-2024-45721: Improper Neutralization of Special Elements used in an OS Command
home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the HOST name configuration screen. An arbitrary OS command may be executed with the root privilege by an administrative user...
WordPress plugin Full Screen Menu for Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-16556 · WordPress · Full Screen Menu For Elementor
Name of the Vulnerable Software and Affected Versions: Full Screen Menu for Elementor plugin for WordPress versions up to, and including, 1.0.7 Description: The Full Screen Menu for Elementor plugin for WordPress has an Information Exposure issue due to insufficient restrictions on which posts ca...
CVE-2024-10797: Authorization Bypass Through User-Controlled Key
The Full Screen Menu for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.7 via the Full Screen Menu Elementor Widget due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers,...
WordPress Full Screen Menu for Elementor plugin <= 1.0.7 - Authenticated (Contributor+) Post Disclosure vulnerability
Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Full Screen Menu for Elementor versions = 1.0.7...
Huawei HarmonyOS UIExtension Module Cross-Process Screen Stack Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the Huawei HarmonyOS UIExtension module, which can be exploited by attackers to compromise confidentiality...
CVE-2024-37773
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...
CVE-2024-37773: Improper Control of Generation of Code
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...
CVE-2024-54119
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...