CVE-2023-42572

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information...

Information disclosure

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information...

Spoofing

PendingIntent hijacking vulnerability in Search Widget prior to version 3.4 in China models allows local attackers to access data...

CVE-2023-42573

CVE-2023-42573 describes a PendingIntent hijacking vulnerability in the Search Widget on Samsung devices, affecting China models prior to version 3.4 . The underlying flaw allows local attackers to access data through hijacked PendingIntents. Connected sources specify that vulnerable versions are...

CVE-2023-42573

PendingIntent hijacking vulnerability in Search Widget prior to version 3.4 in China models allows local attackers to access data...

CVE-2023-42572

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information...

CVE-2023-42572

CVE-2023-42572 affects Samsung Account Web SDK prior to version 1.5.24. The vulnerability is described as an implicit intent hijacking that could allow an attacker to obtain sensitive information. Documents consistently reference the affected component as the Samsung Account Web SDK and indicate ...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability previously existed in SAMSUNG Mobile devices version 1.5.24, which stemmed from an implicit intent hijacking vulnerability in the...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices prior to version 3.4, which stems from a PendingIntent hijacking vulnerability in the Search Widget...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

Hardcoded credentials

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking. The root cause is that TcApi.dll is not reliably loaded from DLL search paths, allowing an attacker to place a malicious TcApi.dll in writable directories (for example, C:\Users\AppData\Local\Programs\Microsoft VS Code\bin\TcApi.dll or C:\Users\...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

PHPJabbers Availability Booking Calendar 5.0 HTML Injection

Exploit Title: PHPJabbers Availability Booking Calendar v5.0 - HTML Injection Date: 13/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/availability-booking-calendar/sectionDemo Version: v5.0...

Dell DM5500 跨站脚本漏洞

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escapin...

PT-2023-28443 · Unknown · Searchwidget

Name of the Vulnerable Software and Affected Versions: Search Widget versions prior to 3.4 Description: The issue allows local attackers to access data through a PendingIntent hijacking vulnerability in the Search Widget, specifically in China models. Recommendations: For versions prior to 3.4,...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-45252

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges...