Lucene search
+L

630 matches found

ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.9 views

CVE-2022-22268

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode...

6.1CVSS6.4AI score0.00112EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/10 2:12 p.m.26 views

CVE-2022-22268

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode...

6.1CVSS0.00112EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/10 2:12 p.m.7 views

CVE-2022-22268

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode...

6.1CVSS5.8AI score0.00112EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/10 2:12 p.m.28 views

Information disclosure

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode...

3.6CVSS6.3AI score0.00112EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/01/07 10:39 p.m.127 views

CVE-2022-22268

CVE-2022-22268 concerns Samsung Knox Guard. The vulnerability is described as an incorrect implementation that, on affected devices, allows a physically proximate attacker to temporarily unlock Knox Guard by using Samsung DeX mode when Knox Guard is locked. Root cause: DeX mode runs in contexts w...

6.1CVSS6.2AI score0.00112EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/07 10:39 p.m.32 views

CVE-2022-22268

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode...

6.1CVSS6.5AI score0.00112EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2021/12/20 5:53 p.m.348 views

Critical security issues in XML encoding in github.com/dexidp/dex

Impact The following vulnerabilities have been disclosed, which impact users leveraging the SAML connector: Signature Validation Bypass CVE-2020-15216: https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-q547-gmf8-8jr7 encoding/xml instabilities: - Element namespace prefix...

9.8CVSS6.8AI score0.02047EPSS
SaveExploits0References12Affected Software2
OSV
OSV
added 2021/12/20 5:53 p.m.86 views

GHSA-M9HP-7R99-94H5 Critical security issues in XML encoding in github.com/dexidp/dex

Impact The following vulnerabilities have been disclosed, which impact users leveraging the SAML connector: Signature Validation Bypass CVE-2020-15216: https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-q547-gmf8-8jr7 encoding/xml instabilities: - Element namespace prefix...

9.3CVSS8.1AI score0.01718EPSS
SaveExploits0References11
OSV
OSV
added 2021/12/20 5:52 p.m.32 views

GHSA-2X32-JM95-2CPX Authentication Bypass in dex

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

9.8CVSS6.7AI score0.01718EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/12/20 5:52 p.m.68 views

Authentication Bypass in dex

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

9.8CVSS8.8AI score0.01718EPSS
SaveExploits0References5Affected Software1
Code423n4
Code423n4
added 2021/12/01 12:0 a.m.13 views

splitReinvest() can be front run

Handle WatchPug Vulnerability details function splitReinvestuint256 rewardLiquidity external retrieveRewardrewardLiquidity; uint256 rewardBalance = rewardToken.balanceOfaddressthis; rewardToken.safeTransferaddressdexHandler, rewardBalance.div2; dexHandler.buyMalt; bondAccountmsg.sender; emit...

7AI score
SaveExploits0
Kitploit
Kitploit
added 2021/07/04 12:30 p.m.71 views

FRIDA-DEXDump - Fast Search And Dump Dex On Memory

Features 1. support fuzzy search broken header dex. 2. fix struct data of dex-header. 3. compatible with all android versionfrida supported. 4. support loading as objection plugin 5. pypi package has been released Requires frida: pip install frida optional click pip install click Installation Fro...

7.4AI score
SaveExploits0References2
NVD
NVD
added 2021/06/11 3:15 p.m.22 views

CVE-2021-25392

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path...

5.5CVSS0.00102EPSS
SaveExploits1References2
OSV
OSV
added 2021/06/11 3:15 p.m.7 views

CVE-2021-25392

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path...

5.5CVSS6.3AI score0.00102EPSS
SaveExploits1References2
Prion
Prion
added 2021/06/11 3:15 p.m.21 views

Path traversal

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path...

2.1CVSS5.3AI score0.00102EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/06/11 2:45 p.m.27 views

CVE-2021-25392

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path...

4CVSS5.5AI score0.00102EPSS
SaveExploits1References2
CVE
CVE
added 2021/06/11 2:45 p.m.42 views

CVE-2021-25392

CVE-2021-25392 concerns Samsung DeX backup path configuration. The Red Hat/NVD/CVE entries describe an improper protection of the backup path, enabling a local attacker to access sensitive information by changing the path. Affected component is the Dex-related backup path handling; the root cause...

5.5CVSS5.9AI score0.00102EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/06/01 12:0 a.m.32 views

ASB-A-178055795

In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.8AI score0.00217EPSS
SaveExploits0References4
NVD
NVD
added 2021/05/28 11:15 a.m.24 views

CVE-2020-27847

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

9.8CVSS0.01718EPSS
SaveExploits0References3
OSV
OSV
added 2021/05/28 11:15 a.m.24 views

CVE-2020-27847

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

9.8CVSS9.2AI score0.00977EPSS
SaveExploits0References3
Rows per page
Query Builder