CVE-2023-48034

Acer Wireless Keyboard SK-9662 uses weak encryption in its wireless protocol, enabling a nearby attacker to decrypt keystrokes and inject arbitrary keystrokes. Documented as CVE-2023-48034 with CVSS v3.1 base score 6.1 (MEDIUM). Available sources confirm physical-proximity attack vector and high ...

Acer Wireless Keyboard SK-9662 Security Vulnerability

Acer Wireless Keyboard SK-9662 is a wireless keyboard from Acer China. The Acer Wireless Keyboard SK-9662 suffers from a security vulnerability that stems from the use of weak encryption in the wireless protocol, which allows an attacker to easily monitor and record keylogging and inject arbitrar...

CVE-2023-48034

An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes via use of weak encryption...

The vulnerability of the Password Change function in the microprogrammed control access controller SmartGard Silver with Matrix Keyboard allows a intruder to disclose the protected information.

The vulnerability of the Password Change function in the microprogrammed access control device SmartGard Silver with Matrix Keyboard involves the transmission of critical information in plaintext. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose the protected...

PT-2023-7536 · Acer · Acer Wireless Keyboard Sk-9662

Name of the Vulnerable Software and Affected Versions: Acer Wireless Keyboard SK-9662 affected versions not specified Description: The issue is related to weak encryption in the Acer Wireless Keyboard SK-9662, allowing an attacker in physical proximity to decrypt wireless keystrokes and inject...

kernel: hid: Use After Free in asus_remove()

A use-after-free flaw was found in asuskbdbacklightset in drivers/hid/hid-asus.c in the Linux Kernel. This issue could allow an attacker to crash the system when plugging in or disconnecting a malicious USB device, which may lead to a kernel information leak problem...

kernel: hid: Use After Free in asus_remove()

A use-after-free flaw was found in asuskbdbacklightset in drivers/hid/hid-asus.c in the Linux Kernel. This issue could allow an attacker to crash the system when plugging in or disconnecting a malicious USB device, which may lead to a kernel information leak problem...

The vulnerability of the _XkbReadKeySyms() function in the X Window System protocol library LibX11 allows a hacker to gain access to confidential data.

The vulnerability of the XkbReadKeySyms function in the X Window System LibX11 library lies in its ability to read data beyond the allowed limits of the data buffer. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

Updated gnome-shell packages fix a security vulnerability

The updated packages fix a security vulnerability: GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool. CVE-2023-43090...

PT-2023-9801 · Asyncssh +3 · Asyncssh +3

Name of the Vulnerable Software and Affected Versions: AsyncSSH versions 2.14.0 and earlier Description: The issue in AsyncSSH allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, also known as a "Rogue Session Attack." This can lea...

kernel: hid: Use After Free in asus_remove()

A use-after-free flaw was found in asuskbdbacklightset in drivers/hid/hid-asus.c in the Linux Kernel. This issue could allow an attacker to crash the system when plugging in or disconnecting a malicious USB device, which may lead to a kernel information leak problem...

Rocky Linux 8 : firefox (RLSA-2022:8554)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8554 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined wi...

CVE-2023-5920

Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to read the keyboard input...

CVE-2023-5920 Lack Of Secure Keyboard Entry Protection in MacOS Desktop

Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to read the keyboard input...

CVE-2023-5920

Mattermost Desktop for MacOS is reported to fail to utilize macOS’s secure keyboard input, allowing other processes to read keyboard input. Affected component: Mattermost Desktop for MacOS; underlying issue is failure to activate secure keyboard entry. Documented impact is local access by other p...

CVE-2023-5920 Lack Of Secure Keyboard Entry Protection in MacOS Desktop

Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to read the keyboard input...

CVE-2023-5920 Lack Of Secure Keyboard Entry Protection in MacOS Desktop

Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to read the keyboard input...

Mattermost Security Vulnerabilities

Mattermost is an open source collaboration platform from the US-based company Mattermost. A security vulnerability exists in Mattermost Desktop macOS that stems from the inability of users to utilize the secure keyboard input feature provided by macOS...

PT-2023-32419 · Mattermost · Mattermost Desktop App

Name of the Vulnerable Software and Affected Versions: Mattermost Desktop for MacOS affected versions not specified Description: The issue is related to Mattermost Desktop for MacOS failing to utilize the secure keyboard input functionality provided by macOS. This failure allows other processes t...

USN-6407-2 libx11 vulnerabilities

USN-6407-1 fixed several vulnerabilities in libx11. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Gregory James Duck discovered that libx11 incorrectly handled certain keyboard symbols. If a user were tricked...