CVE-2022-36829

Summary of findings (CVE-2022-36829) : The vulnerability affects Charm by Samsung, in the releaseAlarm function. It is a PendingIntent hijacking issue that allows local attackers to access files without permission via implicit intents on versions prior to 1.2.3 . The root cause is a flaw in how r...

CVE-2022-36838

The CVE-2022-36838 entry concerns Samsung Galaxy Wearable prior to version 2.2.50, with an implicit intent hijacking vulnerability that can allow an attacker to obtain sensitive information. Affected component: Galaxy Wearable software (pre-2.2.50). Root cause: implicit Intent handling leading to...

CVE-2022-36838

Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive information...

CVE-2022-36835

Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files...

CVE-2022-36835

Samsung Internet Browser is affected by an Implicit Intent hijacking vulnerability in versions prior to 17.0.7.34. The issue allows an attacker to access arbitrary files via the vulnerable Intent handling path. Affected product: Samsung Internet Browser (Samsung) pre-17.0.7.34. Root cause: implic...

SAMSUNG Internet Browser 安全漏洞

SAMSUNG Internet Browser is a Samsung Browser from Samsung South Korea. A security vulnerability exists in SAMSUNG Internet Browser versions prior to 17.0.7.34, which stems from an implicit Intent hijacking vulnerability that can be exploited by an attacker to access arbitrary files...

PT-2022-21839 · Unknown · Usmartview

Name of the Vulnerable Software and Affected Versions: Smart View versions prior to SMR Aug-2022 Release 1 Description: The issue allows an attacker to access the MAC address of a connected device through an Implicit Intent hijacking vulnerability. Recommendations: For versions prior to SMR...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Galaxy Wearable prior to version 2.2.50, which stems from the presence of an implicit intent...

PT-2022-23644 · Samsung · Samsung Update Setup

Name of the Vulnerable Software and Affected Versions: Samsung Update Setup versions prior to 2.2.9.50 Description: The issue allows attackers to execute arbitrary code through a DLL hijacking vulnerability. Recommendations: For versions prior to 2.2.9.50, update to version 2.2.9.50 or later to...

SAMSUNG Mobile devices 代码问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Samsung Update Setup prior to version 2.2.9.50, which stems from a DLL hijacking vulnerability that can...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Smart View Module SMR Aug-2022 Release 1 prior to Release 1, which stems from the presence of an implic...

PT-2022-23642 · Samsung · Galaxy Wearable

Name of the Vulnerable Software and Affected Versions: Galaxy Wearable versions prior to 2.2.50 Description: The issue allows an attacker to obtain sensitive information through an Implicit Intent hijacking vulnerability. Recommendations: For Galaxy Wearable versions prior to 2.2.50, update to...

IBM CICS TX Advanced Input Validation Error Vulnerability

IBM CICS TX Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Advanced version 11.1 contains an input validation error vulnerability that stems from improper input validation of the...

CVE-2022-20820

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-site scripting XSS attack or a frame hijacking attack against a user of the web interface. For more information about these vulnerabilities, see the Details section of this...

CVE-2022-20852

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-site scripting XSS attack or a frame hijacking attack against a user of the web interface. For more information about these vulnerabilities, see the Details section of this...

Cisco Webex Meetings Web Interface Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-site scripting XSS attack or a frame hijacking attack against a user of the web interface. For more information about these vulnerabilities, see the Details "details" section of...

TripleCross 安全漏洞

TripleCross is a Linux eBPF rootkit with backdoor, C2, library injection, execution hijacking, persistence, and steganography from the individual developer Marcos Bajo in Spain. A security vulnerability exists in TripleCross version v0.1.0, which stems from a segmentation fault that occurs when...

PT-2022-3986 · Cisco · Cisco Webex Meetings

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings affected versions not specified Description: The issue exists due to insufficient protection of the web page structure in the web interface of Cisco Webex Meetings. This could allow a remote attacker to conduct a cross-si...

PT-2022-3985 · Cisco · Cisco Webex Meetings

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings affected versions not specified Description: The issue is related to multiple vulnerabilities in the web interface of Cisco Webex Meetings, which could allow a remote attacker to conduct a cross-site scripting XSS attack ...

When a sextortion victim fights back

When Katie Yates suddenly started receiving nude photos of her friend, Natalie Claus, over on Snapchat, she instantly recognized that Claus had just become a victim of a sextortion attack. She also knew how Claus should respond. This happened in December 2019 when Claus was a sophomore. Both were...