2380 matches found
CVE-2022-47027
Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionary traversal vulnerability and achieve arbitrary code execution...
CVE-2022-47027
Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionary traversal vulnerability and achieve arbitrary code execution...
Directory traversal
Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionary traversal vulnerability and achieve arbitrary code execution...
Timmystudios Fast Typing Keyboard 路径遍历漏洞
Timmystudios Fast Typing Keyboard is an Android app keyboard by Timmystudios. A security vulnerability exists in Timmystudios Fast Typing Keyboard version v1.275.1.162, which originated from a vulnerability that allows unauthorized applications to overwrite arbitrary files in its internal storage...
CVE-2022-47027
Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionary traversal vulnerability and achieve arbitrary code execution...
Timmystudios Fast Typing Keyboard 路径遍历漏洞
Timmystudios Fast Typing Keyboard is an Android app keyboard by Timmystudios. A security vulnerability exists in Timmystudios Fast Typing Keyboard version 1.275.1.277, which stems from a directory traversal vulnerability. The vulnerability can be exploited to execute arbitrary code via a dex file...
CVE-2022-47027
CVE-2022-47027 affects Timmystudios Fast Typing Keyboard v1.275.1.162. A dictionary traversal vulnerability in the app’s internal storage allows unauthorized apps to overwrite arbitrary files, enabling arbitrary code execution. Connected sources corroborate the same description and surface no pub...
NewStart CGSL CORE 5.05 / MAIN 5.05 : gnome-tweak-tool Vulnerability (NS-SA-2023-0022)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has gnome-tweak-tool packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physica...
NewStart CGSL CORE 5.05 / MAIN 5.05 : colord Vulnerability (NS-SA-2023-0023)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has colord packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access t...
NewStart CGSL CORE 5.05 / MAIN 5.05 : osinfo-db Vulnerability (NS-SA-2023-0026)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has osinfo-db packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical acces...
NewStart CGSL CORE 5.05 / MAIN 5.05 : xchat Multiple Vulnerabilities (NS-SA-2023-0021)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has xchat packages installed that are affected by multiple vulnerabilities: - An error within the parserollei function internal/dcrawcommon.cpp within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop...
Crypto-Stealing OpcJacker Malware Targets Users with Fake VPN Service
A piece of new information-stealing malware called OpcJacker has been spotted in the wild since the second half of 2022 as part of a malvertising campaign. "OpcJacker's main functions include keylogging, taking screenshots, stealing sensitive data from browsers, loading additional modules, and...
A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012 but in asus devices the work_struct may be scheduled by the LED controller while the device is disconnecting triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.
...
OESA-2023-1188 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.CVE-2022-27672 A flaw was found in...
OESA-2023-1187 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return...
AZL-25798 CVE-2023-1079 affecting package kernel for versions less than 5.15.102.1-3
A flaw was found in the Linux kernel. A use-after-free may be triggered in asuskbdbacklightset when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the workstruct may be scheduled by...
UBUNTU-CVE-2023-1079
A flaw was found in the Linux kernel. A use-after-free may be triggered in asuskbdbacklightset when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the workstruct may be scheduled by...
CWA for Chrome OS 23.3.0.40 - keyboard is unresponsive inside the Citrix session
Symptom 1: The keyboard is non-responsive when running in Kiosk mode though it is responsive at the Citrix login in kiosk mode users can enter their username and password but becomes non-responsive inside the Citrix session. Symptom 2: 1. Launch CWA for Chrome OS desktop session 2. Go to the full...