EUVD-2026-118428

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an authentication bypass vulnerability in its remote-control MQTT broker on TCP port 36669, which accepts publicly documented default credentials and an ineffective 4-digit pairing PIN with no rate limiting or lockout, allowing a brute...

CVE-2026-49903

The ClusterRenderingService.dump method, accessible to processes holding android.permission.DUMP and android.permission.PACKAGEUSAGESTATS, acts as a confused deputy. It allows attackers to write arbitrary values to Settings.Global.OVERLAYDISPLAYDEVICES, an operation normally requiring...

CVE-2026-49903

A security vulnerability exists in Google Android where the ClusterRenderingService.dump() method acts as a confused deputy . Processes holding the android.permission.DUMP and android.permission.PACKAGE_USAGE_STATS permissions can access this method to write arbitrary values to Settings.Global.OV...

CVE-2026-49903

The ClusterRenderingService.dump method, accessible to processes holding android.permission.DUMP and android.permission.PACKAGEUSAGESTATS, acts as a confused deputy. It allows attackers to write arbitrary values to Settings.Global.OVERLAYDISPLAYDEVICES, an operation normally requiring...

EUVD-2019-2054

Malware in sbrugna...

SUSE CVE-2011-3663

Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture keystrokes entered on a web page, even when JavaScript is disabled, by using SVG animation accessKey events within that web page...

CVE-2019-1020004

Tridactyl before 1.16.0 allows fake key events...

CVE-2019-1020004

Tridactyl before 1.16.0 allows fake key events...

Code injection

Tridactyl before 1.16.0 allows fake key events...

CVE-2019-1020004

Tridactyl before 1.16.0 allows fake key events...

CVE-2019-1020004

CVE-2019-1020004 concerns Tridactyl before 1.16.0 and is described in multiple sources as allowing fake key events. The connected documents confirm the affected software version and the basic nature of the issue but do not provide further technical details, attack vectors, impact specifics, or re...

CVE-2019-1020004

Tridactyl before 1.16.0 allows fake key events...

PT-2019-11620

Name of the Vulnerable Software and Affected Versions: Tridactyl versions prior to 1.16.0 Description: The issue allows for fake key events. Recommendations: For versions prior to 1.16.0, update to version 1.16.0 or later to resolve the issue...

CVE-2019-1020004: Improper Neutralization of Special Elements used in an OS Command

Tridactyl before 1.16.0 allows fake key events...

Repeat Ctrl down/up events sent to software on Linux VDA from Citrix Workspace App for Windows when holding down Ctrl key

There is a keyboard-related issue with the Linux VDA. If you hold down the Ctrl key when connected to the Linux VDA from Citrix Workspace Appfor Windows, you send repeat Ctrl down/up events to the software on the Linux VDA, which is expecting a single Ctrl Down event. If you hold down the Ctrl ke...

CVE-2002-2312

Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript 1 event.ctrlKey or 2 event.shiftKey onkeydown event contained in a webpage...