EUVD-2020-12328

Malware in sbrugna...

EUVD-2020-12327

Malware in sbrugna...

EUVD-2020-8909

Malware in sbrugna...

EUVD-2020-12449

Malware in sbrugna...

CVE-2020-1102

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1023, CVE-2020-1024...

CVE-2020-0971

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0932,...

CVE-2020-0931

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971,...

CVE-2020-1023

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1024, CVE-2020-1102...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview github.com/elastic/elastic-agent/internal/pkg/agent/application is a single, unified way to add monitoring for logs, metrics, and other types of data to a host Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere d...

PT-2024-33523 · Unknown · Themecenter

Name of the Vulnerable Software and Affected Versions: ThemeCenter versions prior to SMR Dec-2024 Release 1 Description: The issue allows physical attackers to copy apk files to an arbitrary path with ThemeCenter privilege. This is due to a path traversal vulnerability in ThemeCenter...

Ruochan Smart 安全漏洞

Ruochan Smart is a smart home control software from Ruochan. A security vulnerability exists in Ruochan Smart version v4.4.7, which stems from incorrect access control during firmware updates and downloads, and could allow an attacker to gain access to sensitive information by analyzing code and...

PT-2024-33137 · Neye3C · Neye3C

Name of the Vulnerable Software and Affected Versions: Neye3C version 4.5.2.0 Description: The issue concerns incorrect access control in the firmware update and download processes, allowing attackers to access sensitive information by analyzing the code and data within the APK file...

PT-2024-33145 · Unknown · Dreamcatcher Life

Name of the Vulnerable Software and Affected Versions: DreamCatcher Life version 1.8.7 Description: The issue is related to incorrect access control in the firmware update and download processes. This allows attackers to access sensitive information by analyzing the code and data within the APK...

The vulnerability of the software for energy monitoring systems, including EcoStruxure Power Monitoring Expert, EcoStruxure Power Operation (EPO) with Advanced Reports, and EcoStruxure Power SCADA Operation with Advanced Reports, is related to deficiencies in the deserialization mechanism. This allows attackers to execute arbitrary code.

The vulnerabilities of the software for energy monitoring, including EcoStruxure Power Monitoring Expert, EcoStruxure Power Operation EPO with Advanced Reports, and EcoStruxure Power SCADA Operation with Advanced Reports, are related to deficiencies in the deserialization mechanism. Exploiting...

USN-6263-2 openjdk-lts, openjdk-17 regression

USN-6263-1 fixed vulnerabilities in OpenJDK. Unfortunately, that update introduced a regression when opening APK, ZIP or JAR files in OpenJDK 11 and OpenJDK 17. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Motoyasu Saburi discovered that OpenJDK...

Security Bulletin: IBM i Access Client Solutions - Windows Application Package is vulnerable to a timing issue with RSA Decryption in GSKit builds prior to 8.0.55.31 (CVE-2023-32342)

Summary IBM GSKit is used by IBM i Access Client Solutions - Windows Application Package when making TLS connections to an IBM i partition. If an RSA cipher is used, IBM GSKit could allow a remote attacker to obtain sensitive information. Vulnerability Details CVEID:CVE-2023-32342 DESCRIPTION: IB...

CVE-2023-21515

InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store...

Huawei HarmonyOS Security Bypass Vulnerability (CNVD-2023-15717)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. A security bypass vulnerability exists in Huawei HarmonyOS, which stems from an improper interface permission verification in the application package management...

Google Android elevation of privilege vulnerability (CNVD-2022-81237)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from proxy obfuscation in the CarSettings of the application package, which can be exploited by an attacker to cause an elevation of privilege i...

DEBIAN-CVE-2022-1495

Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page...