Уязвимость службы File Input браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить подмену пользовательского интерфейса

Уязвимость службы File Input браузеров Google Chrome и Microsoft Edge связана с ошибками представления информации пользовательским интерфейсом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить подмену пользовательского интерфейса через созданную HTML-страницу...

CVE-2023-30651

Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code...

SAMSUNG Mobile devices 缓冲区错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile device SMR Jul-2023 Release 1, which originates from a read/write overrun in the callgetTspsysfs of...

PT-2021-24206 · Home Assistant · Home Assistant Community Add-On: Ssh & Web Terminal

Name of the Vulnerable Software and Affected Versions: Home Assistant Community Add-on: SSH & Web Terminal versions prior to 10.0.0 Description: The addon.stdin service has an attack surface that requires social engineering. Although the vendor does not agree that this is a vulnerability,...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the secondary input service in the Windows operating system arises due to buffer overflow. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the secondary input service in the Windows operating system is related to the improper handling of incoming requests. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially created application...