kernel: drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe

A NULL pointer dereference was found in the IT6505 DisplayPort bridge driver. If an HPD interrupt fires before the DRM bridge registration completes, the driver attempts to access an uninitialized AUX channel, causing a kernel crash...

kernel: drm/bridge: megachips: Fix a null pointer dereference bug

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: megachips: Fix a null pointer dereference bug When removing the module we will get the following warning: 31.911505 i2c-core: driver stdp2690-ge-b850v3-fw unregistered 31.912484 general protection fault, probably for...

Malicious code in counterstake-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 914d424cbe1169a646b4168d95951a3b22819ba21697ff185656c69bd75c1512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8421 Malicious code in counterstake-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 914d424cbe1169a646b4168d95951a3b22819ba21697ff185656c69bd75c1512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-20255

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

CVE-2023-20255

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

Design/Logic Flaw

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

CVE-2023-20255

CVE-2023-20255 affects Cisco Meeting Server Web Bridge API. Unable to validate HTTP requests allows an unauthenticated, remote attacker to trigger DoS, causing partial availability and dropped video calls due to invalid packets reaching the Web Bridge. Exploitation details across sources show net...

Cisco Meeting Server Web Bridge Denial of Service Vulnerability

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

PT-2023-8660 · Cisco · Cisco Meeting Server

Name of the Vulnerable Software and Affected Versions: Cisco Meeting Server affected versions not specified Description: The issue is related to insufficient validation of HTTP requests in the Web Bridge feature of Cisco Meeting Server, which could allow an unauthenticated, remote attacker to cau...

Cisco Meeting Server Security Vulnerability

Cisco Meeting Server Acano Conferencing Server is a suite of audio and video conferencing server software from Cisco. A security vulnerability exists in Cisco Meeting Server, which stems from a vulnerability in the API for the Web Bridge feature that could lead to a denial of service...

CVE-2023-41255

The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB Android Debug Bridge protocol exposed on...

CVE-2023-41255

CVE-2023-41255 affects the TPC-110W device (Bosch context appears in sources). The issue allows an unprivileged user with subnet access to obtain a root shell by abusing the lack of authentication of the su binary exposed via ADB (Android Debug Bridge). The connected documents provide this core t...

Bosch ctrlX HMI Web Panel WR21 Security Vulnerability

Bosch ctrlX HMI Web Panel WR21 is an HMI panel from Bosch Germany. A security vulnerability exists in Bosch ctrlX HMI Web Panel WR21, which originated from a vulnerability that allows a low-privileged attacker to gain root privileges by modifying critical system properties and exposing the ADB...

PT-2023-29729 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue allows a low privileged user with access to the device when locked in Kiosk mode to install an arbitrary Android application. This can be leveraged to access critical device...

PT-2023-27872 · Google · Android Debug Bridge

Name of the Vulnerable Software and Affected Versions: TPC-110W device affected versions not specified Description: The issue allows an unprivileged user with access to the subnet of the device to gain a root shell on the device itself by exploiting the lack of authentication of the su binary fil...

PT-2023-28842 · Google · Android Debug Bridge +1

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue allows a low-privileged application to modify a critical system property, enabling the exposure of the Android Debug Bridge ADB protocol on the network. This can be exploited to...

The vulnerability of the Adobe Bridge file manager arises from the possibility of writing operations beyond the buffer boundaries in memory, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Adobe Bridge file manager is related to the issue where operations are performed outside the buffer in memory when processing embedded fonts. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially...

The vulnerability of the Adobe Bridge file manager, related to the use of memory after it is freed, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Adobe Bridge file manager is related to the use of memory after it is freed during the processing of embedded fonts. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created file or a malicious...

Adobe Bridge Resource Management Error Vulnerability (CNVD-2023-76925)

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a Resource Management Error vulnerability that stems from the presence of uncontrolled resource consumption by the application, which can be exploited by an attacker to bypass mitigations such as ASLR...