CVE-2023-42572

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information...

CVE-2023-42572

CVE-2023-42572 affects Samsung Account Web SDK prior to version 1.5.24. The vulnerability is described as an implicit intent hijacking that could allow an attacker to obtain sensitive information. Documents consistently reference the affected component as the Samsung Account Web SDK and indicate ...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability previously existed in SAMSUNG Mobile devices version 1.5.24, which stemmed from an implicit intent hijacking vulnerability in the...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices prior to version 3.4, which stems from a PendingIntent hijacking vulnerability in the Search Widget...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

Hardcoded credentials

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking. The root cause is that TcApi.dll is not reliably loaded from DLL search paths, allowing an attacker to place a malicious TcApi.dll in writable directories (for example, C:\Users\AppData\Local\Programs\Microsoft VS Code\bin\TcApi.dll or C:\Users\...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

PHPJabbers Availability Booking Calendar 5.0 HTML Injection

Exploit Title: PHPJabbers Availability Booking Calendar v5.0 - HTML Injection Date: 13/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/availability-booking-calendar/sectionDemo Version: v5.0...

Dell DM5500 跨站脚本漏洞

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escapin...

PT-2023-28443 · Unknown · Searchwidget

Name of the Vulnerable Software and Affected Versions: Search Widget versions prior to 3.4 Description: The issue allows local attackers to access data through a PendingIntent hijacking vulnerability in the Search Widget, specifically in China models. Recommendations: For versions prior to 3.4,...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-45252

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges...

CVE-2023-45252

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges...

Design/Logic Flaw

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges...

PT-2023-29471 · Huddly · Huddlycameraservice

Name of the Vulnerable Software and Affected Versions: Huddly HuddlyCameraService versions prior to 8.0.7, excluding version 7.99 Description: An issue in HuddlyCameraService allows attackers to manipulate files and escalate privileges via the RollingFileAppender.DeleteFile method performed by th...

Huddly Camera Service Security Vulnerability

Huddly Camera Service is a connected camera technology from Huddly, Inc. in the United States. A security vulnerability exists in Huddly Camera Service versions prior to 8.0.7 excluding version 7.99, which stems from a DLL hijacking vulnerability due to HuddlyCameraService being installed in a...

CVE-2023-45252

CVE-2023-45252 (and related CVE-2023-45253) affect Huddly HuddlyCameraService prior to 8.0.7 (excluding 7.99). The root cause is DLL hijacking from the installer placing the service in a directory writable by standard users, enabling file manipulation, remote code execution, and privilege escalat...