PT-2020-12201

Name of the Vulnerable Software and Affected Versions Tesla Model 3 versions prior to 2020.4.10 Description The issue allows Denial of Service to occur due to improper process separation, which enables attackers to disable various functions from the main screen, including the speedometer, web...

CVE-2020-10558: Undefined Security Weakness

The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notification...

Halvotec Information Services RAQuest Input Validation Error Vulnerability

Halvotec Information Services RAQuest is a suite of automated tax withholding software from Halvotec Information Services, Germany. An input validation error vulnerability exists in the login screen in Halvotec Information Services RAQuest version 10.23.10801.0. An attacker could exploit this...

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

Cross site scripting

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

UBUNTU-CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

Shanghai Zhenghang Electronic Technology Co., Ltd. 7-inch touch screen programming software has memory corruption vulnerability

Ltd. is a high-tech enterprise dedicated to product design and development, production, sales and service in the field of industrial control. Ltd. 7-inch touch screen programming software memory corruption vulnerability, attackers can use the vulnerability to construct a deformed hmp file can lea...

CVE-2019-19212: Improper Neutralization of Input During Web Page Generation

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796 Pre-Auth POC c 2020 ZecOps, Inc. - https://ww...

CVE-2020-0052

In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0052

In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0052

In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0052

In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Firefox Bug Opens iPhone AirPods to Third-Party Snooping

Five high-severity bugs were fixed in the Firefox web browser with the release of version 74 by the Mozilla Foundation on Tuesday. In addition, Mozilla reported a quirky moderate-severity flaw that allows hackers to target iPhone users and collect data tied to connected AirPods, if in use. In...

PT-2020-11429

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue allows overriding the UI confirmation screen protected by the Trusted Execution Environment TEE in SurfaceFlinger. This could lead to local escalation of privilege with no...

PT-2020-11418

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a permissions bypass in the smsSelected function of AnswerFragment.java, allowing an SMS to be sent from the lock screen. This could lead to a local escalation of privilege on the...

CVE-2020-0063: Undefined Security Weakness

In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143128911...

CVE-2020-9282

In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the 'Edit access' screen when sharing portfolios...

Memory Corruption Vulnerability in Xinjie Electric Touch Screen Editing Software Twin 2.C.6i

Wuxi Xinjie Electric Co., Ltd XINJE is a well-known domestic enterprise specializing in the research, development and application of industrial automation products. A memory corruption vulnerability exists in Xinjie Electric's touch screen screen editing software Twin 2.C.6i, which can be exploit...