CVE-2026-27949

Plane is an an open-source project management tool. Prior to 1.3.0, a vulnerability was identified in Plane's authentication flow where a user's email address is included as a query parameter in the URL during error handling e.g., when an invalid magic code is submitted. Transmitting personally...

CVE-2026-27949: Exposure of Sensitive Information to an Unauthorized Actor

Plane is an an open-source project management tool. Prior to 1.3.0, a vulnerability was identified in Plane's authentication flow where a user's email address is included as a query parameter in the URL during error handling e.g., when an invalid magic code is submitted. Transmitting personally...

CVE-2023-41929

A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows to exploit this vulnerability...

CVE-2023-41929

A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows to exploit this vulnerability...

PT-2023-28166 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Samsung Memory Card & UFD Authentication Utility PC Software versions prior to 1.0.1 Description: A DLL hijacking vulnerability could allow a local attacker to escalate privileges, given that the attacker already has user privileges on Window...

CVE-2023-41929: Uncontrolled Search Path Element

A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows to exploit this vulnerability...