EUVD-2025-208690

Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly accessing a specific resource inaccessible via a graphical interface. This issue has been fixed in firmware versions: 1.36 for tcPDU, 1.67 for LK3...

lk-j.co.jp Cross Site Scripting vulnerability OBB-3888981

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lk-j.co.jp Cross Site Scripting vulnerability OBB-3876300

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-20022: Out-of-bounds Read

In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08528255...

PT-2024-1000

Name of the Vulnerable Software and Affected Versions lk affected versions not specified Description The issue is related to a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction...

lk-verden.de Improper Access Control vulnerability OBB-3778886

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Why is .US Being Used to Phish So Many of Us?

Domain names ending in ".US" -- the top-level domain for the United States -- are among the most prevalent in phishing scams, new research shows. This is noteworthy because .US is overseen by the U.S. government, which is frequently the target of phishing domains ending in .US. Also, .US domains...

lk-j.co.jp Cross Site Scripting vulnerability OBB-3399139

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview relap-lk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Google Android LK elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android LK has a security vulnerability. An attacker can exploit this vulnerability to elevate privileges...

CVE-2021-0468

In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

PT-2021-13127

Name of the Vulnerable Software and Affected Versions: Android versions Android SoC Description: The issue is related to an insecure default value in LK, which could lead to a local escalation of privilege. An attacker with physical access to the device can exploit this issue without needing...

lk-vr.de Cross Site Scripting vulnerability

Security Researcher Hchabik Helped patch 2345 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting lk-vr.de website and its users. Following coordinated and...

lk-tronics.com Improper Access Control vulnerability

Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting lk-tronics.com website and its users. Following coordinate...

PT-2018-5998

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: An integer overflow issue exists when accessing the keystore in LK, potentially leadin...

CVE-2017-15828: Integer Overflow or Wraparound

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while accessing the keystore in LK, an integer overflow vulnerability exists which may potentially lead to a buffer overflow...

Samsung, Huawei and other phone Bootloader was traced to the presence of many high-risk bug-vulnerability warning-the black bar safety net

California University research team to create the main stream mobile platform in the bootloader exists in the code test and the DOS of the security gap. Workshop staff with a BootStomp to create 6 new found cracks, 5 of which division is the manufacturer to confirm. There is also a su XI reported...

CVE-2013-2598

The CVE affects the Little Kernel (LK) bootloader used in Qualcomm Innovation Center Android contributions for MSM devices. A vulnerability in app/aboot/aboot.c allows overwriting the bootloader’s signature-verification code when a crafted boot-image load-destination header specifies memory locat...

CVE-2013-2598: Improper Input Validation

app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to overwrite signature-verification code via crafted boot-image load-destination header values that specify memory...

PT-2014-2599

Name of the Vulnerable Software and Affected Versions Little Kernel LK bootloader affected versions not specified Description The issue allows attackers to overwrite signature-verification code by crafting boot-image load-destination header values that specify memory locations within bootloader...