493 matches found
Design/Logic Flaw
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...
CVE-2024-0019
The CVE-2024-0019 issue affects Android’s AppOpsControllerImpl.setListening in the Framework. A missing check for active recordings can allow hiding the microphone privacy indicator when SystemUI restarts, enabling local denial of service without extra privileges. Impact is limited to DoS on the ...
CVE-2024-0019
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...
nss security update
3.90.0-6 - Fix ecc DER wrapping. 3.90.0-5 - Pick up validated constant time implementations of p256, p384, and p521 from upsream - More Fips indicator changes...
nss security update
3.90.0-6 - Fix ecc DER wrapping. 3.90.0-5 - Pick up validated constant time implementations of p256, p384, and p521 from upsream - More Fips indicator changes...
ASB-A-300741186
In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local escalation of privilege that fails to remove the persistent dot with no additional execution privileges needed. User interaction is not...
CVE-2023-51126
creationtimestamp| type| source ---|---|--- 2024-01-10 22:32:14+00:00| seen| https://t.me/ctinow/166157 2024-01-28 19:31:45+00:00| seen| https://t.me/ctinow/175005...
ASB-A-294104969
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...
CVE-2023-49356
creationtimestamp| type| source ---|---|--- 2023-12-22 11:22:14+00:00| seen| https://t.me/ctinow/158317 2023-12-29 21:17:22+00:00| seen| https://t.me/ctinow/160689...
GHSA-6QM2-WPXQ-7QH2
creationtimestamp| type| source ---|---|--- 2023-12-21 19:36:55+00:00| seen| https://t.me/ctinow/157912...
Ray cpu_profile command injection
Ray RCE via cpuprofile command injection vulnerability. Module Options msf use exploit/linux/http/ray/cpuprofilecmdinjectioncve20236019 msf undefinedcpuprofilecmdinjectioncve20236019 show actions ...actions... msf undefinedcpuprofilecmdinjectioncve20236019 set ACTION msf...
CVE-2023-4858
creationtimestamp| type| source ---|---|--- 2023-11-07 00:25:57+00:00| seen| https://t.me/cibsecurity/73642...
CVE-2023-41975
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. A website may be able to access the microphone without the microphone use indicator being shown...
CVE-2023-41975
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. A website may be able to access the microphone without the microphone use indicator being shown...
Apple macOS Security Breach
Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14.1, which originates from a website that may be able to access the microphone without displaying a microphone usage indicator...
CVE-2023-46117
creationtimestamp| type| source ---|---|--- 2023-10-20 23:58:02+00:00| seen| https://t.me/cibsecurity/72711...
Cisco IOS XE CVE-2023-20198 Implant Indicator of Compromise
Binary data ciscoiosxeimplantCVE-2023-20198.nbin...
CVE-2023-44184
An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the management daemon mgd process of Juniper Networks Junos OS and Junos OS Evolved allows a network-based authenticated low-privileged attacker, by executing a specific command via NETCONF, to cause a CPU...
CVE-2023-44183
An Improper Input Validation vulnerability in the VxLAN packet forwarding engine PFE of Juniper Networks Junos OS on QFX5000 Series, EX4600 Series devices allows an unauthenticated, adjacent attacker, sending two or more genuine packets in the same VxLAN topology to possibly cause a DMA memory le...
Design/Logic Flaw
An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the management daemon mgd process of Juniper Networks Junos OS and Junos OS Evolved allows a network-based authenticated low-privileged attacker, by executing a specific command via NETCONF, to cause a CPU...