CVE-2023-33175 ToUI allows user-specific variables to be shared between users

ToUI is a Python package for creating user interfaces websites and desktop apps from HTML. ToUI is using Flask-Caching SimpleCache to store user variables. Websites that use Website.uservars property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1...

CVE-2023-29745

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database...

CVE-2023-29742

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulating the database...

PT-2023-22385 · Unknown · Edjing Mix

Name of the Vulnerable Software and Affected Versions: edjing Mix version 7.09.01 Description: The issue allows unauthorized apps to cause escalation of privilege attacks by manipulating the database. Recommendations: For edjing Mix version 7.09.01, at the moment, there is no information about a...

PT-2023-22394 · Unknown · Bestweather

Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: The issue allows unauthorized apps to cause a persistent denial of service attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, at the moment, there is no information abou...

CVE-2023-29740

The CVE-2023-29740 entry concerns Alarm Clock for Heavy Sleepers v5.3.2 on Android. The issue enables unauthorized apps to cause a denial-of-service by manipulating the app’s database, leading to availability impact. Documented sources consistently identify the affected software and the root caus...

CVE-2023-29734

CVE-2023-29734 affects edjing Mix for Android (v7.09.01). The issue allows unauthorized apps to escalate privileges by manipulating the app’s database. Documented impact is high (privilege escalation; potential confidentiality, integrity, and availability effects) with CVSS v3.1 base score 9.8. N...

DUALSPACE Lock Master 安全漏洞

DUALSPACE Lock Master is a smart and secure Android app lock from DUALSPACE. A security vulnerability exists in DUALSPACE Lock Master version 2.2.4 that stems from allowing unauthorized apps to modify values in their SharedPreference files, which contain data that affects the functionality of man...

CVE-2023-29743

CVE-2023-29743 affects BestWeather v7.3.1 on Android. The issue allows unauthorized apps to manipulate the database, causing a persistent denial of service. Documents confirm impact and CVSS 7.5 (HIGH) with network attack, no privileges, no user interaction, but do not provide exploitation detail...

Alarm Clock 安全漏洞

Alarm Clock is an app from the Smart Alarm Clock Team team. It is used to set the hours and minutes of an online alarm clock. A security vulnerability exists in Alarm Clock for Heavy Sleepers version v.5.3.2, which stems from allowing unauthorized applications to cause privilege escalation via...

CVE-2023-29734

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...

AI-Engine < 1.6.83 - Admin+ Stored XSS

The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example, in multisite setup. PoC Go to Meow Apps » AI Engine » Chatbot tab »...

PT-2023-22384 · Unknown · Lock Master

Name of the Vulnerable Software and Affected Versions: The Lock Master app version 2.2.4 Description: The issue allows unauthorized apps to modify the values in the SharedPreference files of the Lock Master app. These files hold data that affects many app functions. Malicious modifications by...

CVE-2023-29733

The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a seve...

CVE-2023-29734

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...

PT-2023-22393 · Unknown · Bestweather

Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: An issue in BestWeather allows unauthorized apps to cause a code execution attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, at the moment, there is no information abou...

CVE-2023-29733

The CVE-2023-29733 entry concerns the Lock Master app (Android) version 2.2.4. The vulnerability enables unauthorized apps to modify values in the app’s SharedPreference storage, which holds data that governs many functions. This can lead to security issues such as functionality manipulation and ...

CVE-2023-29739

An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component...

CVE-2023-29745

The CVE-2023-29745 entry concerns BestWeather v7.3.1 on Android, where an unauthorized app can cause a persistent denial-of-service by manipulating the app’s database. The Red Hat and other connected documents corroborate the same description. Reported impact: LOCAL attack vector with HIGH integr...

CVE-2023-29742

CVE-2023-29742 affects BestWeather v7.3.1 for Android. An unauthorized app can trigger code execution by manipulating the app’s database. Root cause as stated: database manipulation enables code execution. Public details across connected sources mainly reiterate the affected version and the attac...