CVE-2022-24932

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

CVE-2022-24932

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

Input validation

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

Samsung Setup wizard process安全漏洞

The Samsung Setup wizard process is an installation setup wizard from Samsung South Korea. A security vulnerability exists in the Samsung Setup wizard process that stems from improper protection of alternate paths during the installation wizard process, allowing an attacker to install the securit...

CVE-2022-24932

The CVE-2022-24932 entry concerns Samsung Setup wizard: an Improper Protection of Alternate Path vulnerability in the Setup wizard process allows a physical attacker to install packages before the wizard completes. Affected versions are Setup wizard versions prior to SMR Mar-2022 Release 1. The u...

CVE-2022-24932

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

PT-2022-16994 · Unknown · Setupwizard

Name of the Vulnerable Software and Affected Versions: Setup wizard versions prior to SMR Mar-2022 Release 1 Description: The issue is related to an Improper Protection of Alternate Path vulnerability in the Setup wizard process. This vulnerability allows a physical attacker to install packages...

CVE-2022-24932: Improper Protection of Alternate Path

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

What steps are needed to configure new StoreFront servers with an existing Gateway and Store URL

The objective of this article is to provide the recommended steps at a high level in order to configure two new StoreFront servers to work with an existing Gateway virtual server that utilizes an URL created with an old set of StoreFront servers...

InsightAppSec GitHub Integration Keeps Risky Code From Reaching Production

We've all been there. The software development life cycle SDLC is moving at a mile a minute. Developers are writing code, updating features, and all the while attempting to keep everything introduced into production as safe and secure as possible. GitHub Actions are essential to automation and...

PT-2025-8045

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the ill acc of setup function related to the MIPS architecture and Ralink setup. The issue arises when pdev...

CVE-2021-24803

The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin email, as well as creating a new admin account. There is no CSRF protection in place, allowing an attacker to arbitrary change the admin email or create another admin account a...

CVE-2021-24803

The CVE-2021-24803 entry concerns the WordPress plugin Core Tweaks WP Setup (versions

CVE-2021-24803 Core Tweaks WP Setup <= 4.1 - Arbitrary Admin Account Creation / Admin Email Update via CSRF

The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin email, as well as creating a new admin account. There is no CSRF protection in place, allowing an attacker to arbitrary change the admin email or create another admin account a...

CVE-2021-24803: Cross-Site Request Forgery (CSRF)

The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin email, as well as creating a new admin account. There is no CSRF protection in place, allowing an attacker to arbitrary change the admin email or create another admin account a...

PT-2022-9467

Name of the Vulnerable Software and Affected Versions Core Tweaks WP Setup WordPress plugin versions through 4.1 Description The issue allows an attacker to arbitrarily change the admin email or create another admin account due to the lack of CSRF protection, potentially leading to website takeov...

PT-2022-28943

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.16.7 Description A potential memory leak issue exists in the intel setup irq remapping function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-28906

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.5 Description The issue is related to an invalid parameter check in the dpu setup dspp pcc function. It was introduced in version v5.8 and fixed in Linux Kernel version v5.16.5. The actual impact and attack...

PT-2022-28858

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description A potential memory leak issue exists in the intel setup irq remapping function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...