Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. A security vulnerability exists in Google Android 13, which stems from a vulnerability in its PackageManager that allows an attacker to use side-channel probing to determine whether an application is installed without...

PT-2022-14501 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue allows an attacker to determine whether an app is installed without requiring query permissions, due to side channel information disclosure in DevicePolicyManager. This could lead to local...

PT-2022-14540 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in ActivityManager, which could lead to the disclosure of installed packages. This results in local information disclosure without requiring additiona...

PT-2022-9127 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version 13 Description: In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to a missing permission check. This could lead to local information...

PT-2022-14541 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In ContentResolver, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android 13, which stems from a vulnerability in its LocaleManager that allows an attacker to use side-channel probing to determine whether an application is installed without...

QNAP QTS Installed

Binary data qnapqtsinstalled.nbin...

The default installation configuration “[webserver] secret_key” of the Airflow data processing software’s creation, monitoring, and orchestration tools makes it possible for a malicious individual to gain unauthorized access to an external web server.

The vulnerability of the default installation configuration “webserver secretkey” in software for creating, monitoring, and orchestrating Airflow data processing scenarios is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker, operating remotely...

VMware Spring Cloud Gateway Installed

Binary data vmwarespringcloudgatewayinstalled.nbin...

The vulnerability of the IBM QRadar Network Security intrusion prevention system, related to the use of pre-installed credentials, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM QRadar Network Security intrusion prevention system lies in the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

ALPINE-CVE-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...

The vulnerability of Owl Labs Meeting Owl Pro’s microprogramming software, related to the use of pre-installed credentials, allows a hacker to activate the “tethering Mode” and increase their privileges.

The vulnerability of Owl Labs Meeting Owl Pro’s camera software-related microprogramming system lies in the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to activate the “tethering Mode” mode and increase their privileges...

The vulnerability of Bently Nevada 3701 monitoring and protection systems, related to the use of pre-installed credentials, allows a intruder to execute arbitrary commands.

The vulnerability of Bently Nevada 3701 monitoring and protection systems lies in the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the FTP server Titan FTP Server NextGen, related to the use of pre-installed credentials for the sa account, allows attackers to increase their privileges.

The vulnerability of the Titan FTP Server NextGen installer lies in the use of pre-installed credentials for the sa account. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

June 23, 2022 Servicing stack update (KB5014798)

None None...

Malicious code in slg-shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dbd3031f472625754de58e128a37c5fd4d5784d9e57203f7a82ce8460e26b65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ok-messenger-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7bcdfc9b070b703c4308d68ecabf68a9973d878d832021df11f5fd788327178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-811 Malicious code in ac-animation-sequencer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7595dea4b4bf14edbd22f889a9d64c68692b172c8ffbbc5684b3903c81aeafd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/input-amount (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 994a0a8ffc92c84a5dead72060244e1408f9bdd16a86a402bdcd3e044bf7c29e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whitesourcepublisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48c073a25fc6221d6cf9c2eafcb7e477d226299a5b6556e7768ca8ed7933a4f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...