EUVD-2022-27733

Malicious code in bioql PyPI...

EUVD-2025-29350

Malicious code in bioql PyPI...

CVE-2022-22588

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 15.2.1 and iPadOS 15.2.1. Processing a maliciously crafted HomeKit accessory name may cause a denial of service...

CVE-2021-25436

Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Accessory Protocol...

Certain HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Denial of Service

Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to denial of service when using a wireless accessory connected to devices running Linux. Update your printer firmware...

Session fixation

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

CVE-2024-0230

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

PT-2023-17974 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: A logic error in the code of UsbAccessoryUriActivity.java allows for a possible way to escape the Setup Wizard. This could lead to local escalation of privilege with no additional execution privileges...

Google Android elevation of privilege vulnerability (CNVD-2023-55367)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which stems from a lack of bounds checking in the accctrlrequestcomposite of the faccessory.c component, which can be exploited by an attacker to elevate...

ASB-A-264029575

In accctrlrequestcomposite of faccessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-27700

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...

MuYuCMS 路径遍历漏洞

MuYuCMS is MuYuCMS open source a lightweight open source content management system . MuYuCMS version 2.2 security vulnerability exists , the vulnerability stems from the /accessory/picdel.html component found to contain arbitrary file deletion vulnerability...

CVE-2023-27700

CVE-2023-27700 affects MuYuCMS v2.2, with an arbitrary file deletion vulnerability exposed via the /accessory/picdel.html component. The issue’s impact is described as high (I/H, A/H) with CVSS‑3.1 base score 8.1, attack vector Network, low attack complexity, privileges required Low, no user inte...

CVE-2023-27700

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...

PT-2023-21297 · Muyucms · Muyucms

Name of the Vulnerable Software and Affected Versions: MuYuCMS version 2.2 Description: The issue is related to an arbitrary file deletion vulnerability. It can be exploited via the component /accessory/picdel.html. Recommendations: For MuYuCMS version 2.2, as a temporary workaround, consider...

Vulnerabilities fixed in Snipe-IT

Several vulnerabilities have been fixed in Snipe-IT. The vulnerabilities allow a remote malicious person to launch an XSS attack and to retrieve usernames. To exploit the XSS vulnerability, the malicious party must be authenticated and have rights to Accessory and Consumables to modify. The...

UBUNTU-CVE-2022-29022

A buffer overflow vulnerability exists in the razeraccessory driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Service DoS and possibly escalate their privileges via a crafted buffer sent to the matrixcustomframe device...

CVE-2022-22588

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 15.2.1 and iPadOS 15.2.1. Processing a maliciously crafted HomeKit accessory name may cause a denial of service...

CVE-2022-22588

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 15.2.1 and iPadOS 15.2.1. Processing a maliciously crafted HomeKit accessory name may cause a denial of service...

Apple iPadOS 输入验证错误漏洞

Apple iPadOS is a suite of operating systems for the iPad tablet computer from Apple USA. An input validation error vulnerability exists in Apple iOS and iPadOS that stems from the handling of maliciously crafted HomeKit accessory names could result in a denial of service...