PT-2022-21818 · Samsung · Knox Guard

Name of the Vulnerable Software and Affected Versions: Knoxguard versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper authorization vulnerability. It allows a local attacker to disable the keyguard and bypass the Knoxguard lock by performing a factory reset...

USN-5503-1: GnuPG vulnerability

Demi Marie Obenour discovered that GnuPG incorrectly handled injection in the status message. A remote attacker could possibly use this issue to forge signatures...

ALPINE-CVE-2022-34903

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints e.g., use of GPGME are met, allows signature forgery via injection into the status line...

CVE-2022-34903

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints e.g., use of GPGME are met, allows signature forgery via injection into the status line...

The vulnerability of the implementation of Boot Guard (BG) and Trusted Execution Technology (TXT) in Intel microprogrammable processor software allows a hacker to enhance their privileges.

The vulnerability of the implementation of Boot Guard BG and Trusted Execution Technology TXT in Intel microprogrammable processor software is related to incorrect parameter handling. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft’s Windows Remote Credential Guard system allows attackers to circumvent security restrictions and enhance their privileges.

The vulnerability of Microsoft’s Windows Remote Credential Guard security feature is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...

The vulnerability relates to the set of development tools called Intel Software Guard Extensions SDK, as well as microsoftware such as Intel SGX DCAP and SGX PSW. This vulnerability stems from operations that involve writing to memory beyond the buffer boundaries, allowing attackers to disclose sensitive information.

The vulnerability in the Intel Software Guard Extensions SDK, microsoftware such as Intel SGX DCAP and SGX PSW, is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2022-30150

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability...

CVE-2022-30150

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability...

CVE-2022-30150

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability...

Privilege escalation

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability...

CVE-2022-30150 Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability

...

CVE-2022-30150

Technical details about CVE-2022-30150 (Windows Defender Remote Credential Guard Elevation of Privilege) are not provided in the connected documents. The records include the CVE entry and references but do not specify root cause, affected versions, exploitability, or mitigations within the suppli...

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability

...

A malicious zone operator can piggyback other transactions, when a caller tries to fulfill the restricted order

Lines of code Vulnerability details If an order has a restricted order type and, if the caller is other than the offerer or zone, then a staticcall to isValidOrder on the zone is made. This call outside the Seaport contract opens up a possible misuse by the zone contract implementation. The zone...

infalting the price of tokens to your benfit and no reentracy gaurd you can make your own function for stakefor

Lines of code Vulnerability details Low: you can mint a lot of tokens to contract and inflating the price of tokens and if there is no of getting tokens out of the contract plus if in stakefor function call the function aboves and since there checks and effects patterns are not implemented or...

_cancel function should check order status

Lines of code Vulnerability details Impact In the cancel function of the OrderValidator contract, orderStatusorderHash.isValidated is not checked. This is to allow users to cancel unverified private orders. This is not a good solution. For unverified private orders, the user can verify and cancel...

USN-5431-1 gnupg2 vulnerability

It was discovered that GnuPG was not properly processing keys with large amounts of signatures. An attacker could possibly use this issue to cause a denial of service...

Re-entrancy on BaseRewardPool.getReward()

Lines of code Vulnerability details See @audit-info tags: File: BaseRewardPool.sol 280: / 281: @dev Gives a staker their rewards, with the option of claiming extra rewards 282: @param account Account for which to claim 283: @param claimExtras Get the child rewards too? 284: / 285: function...

GHSA-C7RM-W2HJ-X8G3 Guard bypass in Eloquent models affecting Laravel illuminate database component

An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database component in some situations in which table names are stripped during a mass assignment...