CVE-2024-34601

Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexported activities of GalaxyStore...

CVE-2024-34601

CVE-2024-34601 describes an issue in GalaxyStore before version 4.5.81.0 where the app fails to verify intent in a broadcast receiver, allowing a local attacker to launch unexported activities of GalaxyStore. The NVD/Red Hat/CVE records confirm a local-exploitation vector with low privileges requ...

CVE-2024-34595

Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-34595

CVE-2024-34595 concerns Samsung Mobile/SystemUI prior to the SMR Jul-2024 Release 1. The vulnerability is due to improper access control in the clickAdapterItem of SystemUI, enabling a local attacker to launch privileged activities. Impact is described as high with local attack vector and no user...

CVE-2024-34585

Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-34585

Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-20891

Affected software: SystemUI on Samsung Android devices prior to SMR Jul-2024 Release 1.Vulnerability: improper access control in launchFullscreenIntent; local attacker can launch privileged activities.Root cause/scope: access-control flaw in SystemUI component leading to privilege elevation.Impac...

CVE-2024-20888

Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-20888

Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-20888

CVE-2024-20888 : Improper access control in Samsung OneUIHome prior to SMR Jul-2024 Release 1 enables local attackers to launch privileged activities. Impact: high confidentiality, integrity, and availability concerns; attack vector is local with user interaction required. Affected software: OneU...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices version 4.5.81.0, which stemmed from an improper intent validation issue in...

PT-2024-26016 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: GalaxyStore versions prior to 4.5.81.0 Description: The issue is related to improper verification of intent by a broadcast receiver in GalaxyStore, allowing local attackers to launch unexported activities of GalaxyStore. Recommendations: For...

PT-2024-18804 · Systemui · Systemui

Name of the Vulnerable Software and Affected Versions: SystemUI versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control in the launchFullscreenIntent of SystemUI, allowing local attackers to launch privileged activities. Recommendations: For versions...

PT-2024-18800 · Samsung · One Ui Home

Name of the Vulnerable Software and Affected Versions: OneUIHome versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control, allowing local attackers to launch privileged activities. User interaction is required to trigger this issue. Recommendations: Fo...

Malicious code in activities-ui-components (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1726 Malicious code in activities-ui-components (npm)

--- -= Per source details. Do not edit below this line.=-...

TotalCloud Insights: Protect Your AWS Environment by Managing Access Keys Securely

Introduction With the average cost of a data breach coming in at $4.45M in 2023, safeguarding sensitive information and maintaining the security of cloud environments is more critical than ever. Instances of compromised access keys, not exclusive to AWS Amazon Web Services but prevalent across...

PT-2024-37114

Name of the Vulnerable Software and Affected Versions: LINE client for iOS versions prior to 14.9.0 Description: The in-app browser of the LINE client contains a Universal XSS UXSS vulnerability, allowing for cross-site scripting XSS where arbitrary JavaScript can be executed in the top frame fro...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment O...

CVE-2024-32983 Misskey allows the impersonation and takeover of remote accounts with unnormalized signed activities

Misskey is an open source, decentralized microblogging platform. Misskey doesn't perform proper normalization on the JSON structures of incoming signed ActivityPub activity objects before processing them, allowing threat actors to spoof the contents of signed activities and impersonate the author...