CVE-2022-32883

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to read sensitive location information...

CVE-2022-32883

CVE-2022-32883 describes a logic issue that allowed an app to read sensitive location information. It is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, and macOS Big Sur 11.7. The issue is mitigated by applying the listed Apple OS updates; no exploitation status is provided beyon...

CVE-2022-40142

A security link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service agents could allow a local attacker to create a writable folder in an arbitrary location and escalate privileges on affected installations. Please note: an attacker mus...

Uninformed Request

thunderbird has uninformed request. The vulnerability exists due to a a flaw found in Mozilla sending a request to the remote document when receiving an HTML email that specified to load an iframe element from a remote location...

CVE-2022-39007

The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation...

CVE-2022-39007

The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation...

Privilege escalation

The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation...

CVE-2022-39007

The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation...

CVE-2022-39007

The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation...

CVE-2022-39007

CVE-2022-39007 affects Huawei HarmonyOS Location module. Root cause: insufficient checksum of the Location module privilege, enabling bypass of permission verification and potential elevation of privilege. Impact: privilege escalation, high risk per records. No fix/version in documents; monitor f...

mangadex-downloader vulnerable to unauthorized file reading

Impact When using file: command and is web URL location http, https. mangadex-downloader will try to open and read a file in local disk if the content from online file is exist-as-a-file in victim computer So far, the app only read the files and not execute it. But still, when someone reading you...

PT-2022-24664 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Location module affected versions not specified Description: The issue concerns a vulnerability in the location module that allows bypassing permission verification, potentially leading to privilege escalation. Recommendations: At the moment,...

Adobe Photoshop Multiple Vulnerabilities (APSB21-109) - Windows

Adobe Photoshop is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The privacy concerns of tying SIM cards to real identities

The registration of SIM cards tied to a verified identity is back in the news, off the back of large-scale phone fraud. In what some may call a knee-jerk response to a problem, there are calls to revive a legal bill and make it law. Whats happening, and what are the potential ramifications? Hitti...

PT-2022-24429 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF version 365a16a Description: A segmentation violation was discovered in LIEF via the component CoreFile.tcc:69. Recommendations: For LIEF version 365a16a, apply the patch available at commit ca938740264f1fcb18f91cba8e4039c518ecb75b...

PT-2022-26606 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.7 macOS Monterey versions prior to 12.6 macOS Ventura versions prior to 13 Description: An access issue was addressed with improved access restrictions, allowing an app to potentially read sensitive location...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is the 17th major version of Apple's macOS, the operating system used by Apple Inc. for MACs in the United States. A security vulnerability exists in Apple macOS Big Sur versions prior to 11.7, which stems from the fact that applications may be able to read sensitive location...

Hauk 信任管理问题漏洞

Hauk is a fully open source, self-hosted location sharing service from the individual developer Marius Lindvall. A security vulnerability exists in Hauk v1.6.1, which stems from hardcoded passwords stored in plaintext in the config.php file on the server side and on the android client device...

Huawei HarmonyOS Elevation of Privilege Vulnerability (CNVD-2022-64985)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. An elevation of privilege vulnerability exists in Huawei HarmonyOS, which stems from insufficient checksum of the Location module privilege. An attacker could...

GoCD 安全漏洞

GoCD is a continuous delivery server. A security vulnerability exists in GoCD versions prior to 22.2.0 that stems from a Windows installation performed by a server or proxy installer that does not sufficiently restrict permissions when installed outside of the default location, which could allow ...