CVE-2022-46480

Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firmware 02.27.0012 allows an attacker to sniff the unlock code and unlock the device whilst within Bluetooth range...

Yale Conexis L1 Security Vulnerability

The Yale Conexis L1 is a smart door lock from Yale. A security vulnerability exists in the Yale Conexis L1 v1.0.0, which stems from a weak encryption mechanism in the RFID tag that allows an attacker to create a clone of the original tag by physically approaching it...

Yale Keyless Lock Security Vulnerability

Yale Keyless Lock is a keyless connected smart lock from Yale. A security vulnerability exists in Yale Keyless Lock v1.0, which stems from a weak encryption mechanism in the RFID tags, leading to an attacker being able to create a clone of the original tag by getting physically close to it...

CVE-2022-46480

Technical details for CVE-2022-46480 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2023-26943

Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical proximity to the original...

PT-2023-28447 · Samsung +1 · Samsung Voice Recorder +3

Name of the Vulnerable Software and Affected Versions: Samsung Voice Recorder versions prior to 21.4.15.01 in Android 12 and Android 13 Samsung Voice Recorder versions prior to 21.4.50.17 in Android 14 Description: The issue is related to improper access control in the Samsung Voice Recorder,...

PT-2023-20864 · Yale · Yale Keyless Lock

Name of the Vulnerable Software and Affected Versions: Yale Keyless Lock version v1.0 Description: The issue is related to weak encryption mechanisms in RFID Tags, which allows attackers to create a cloned tag via physical proximity to the original. Recommendations: For Yale Keyless Lock version...

WhatsApp's New Secret Code Feature Lets Users Protect Private Chats with Password

Meta-owned WhatsApp has launched a new Secret Code feature to help users protect sensitive conversations with a custom password on the messaging platform. The feature has been described as an "additional way to protect those chats and make them harder to find if someone has access to your phone o...

ASB-A-288896339

In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-49028

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

CVE-2023-49028

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file...

CVE-2023-49029

Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the lock/lock.php file...

CVE-2023-25632

The Android Mobile Whale browser app before 3.0.1.2 allows the attacker to bypass its browser unlock function via 'Open in Whale' feature...

SMPN 1 Semarang absis security vulnerability

absis is an open source web-based K13/KTSP academic system from SMPN 1 Semarang. A security vulnerability exists in SMPN 1 Semarang absis v.2017-10-19 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the nama parameter in the lock/lock.php file...

ORA-27515 Error During Managed Application Backup Policy Run

Challenge Running a managed backup policy with Veeam Plugin for Oracle RMAN results in job failure: Failed to execute plug-in manager command: RMAN-03002: failure of backup command at 07/13/2023 Plugin logs /tmp/veeampluginlogs and database trace files reference ORA-27515 error: $ grep ORA-27515...

SMPN 1 Semarang absis security vulnerability

absis is an open source web-based K13/KTSP academic system from SMPN 1 Semarang. A security vulnerability exists in SMPN 1 Semarang absis v.2017-10-19 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the user parameter of the lock/lock.php file...

PT-2023-31031 · Unknown · Smpn1Smg Absis

Name of the Vulnerable Software and Affected Versions: smpn1smg absis versions 2017-10-19 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the nama parameter in the "lock/lock.php" file. This is a Cross Site Scripting vulnerability. Recommendations: For...

kernel: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFSLAYOUTDRAIN We found a few different systems hung up in writeback waiting on the same page lock, and one task waiting on the NFSLAYOUTDRAIN bit in pnfsupdatelayout, however the pnfslayouthdr's...

kernel: igb: revert rtnl_lock() that causes deadlock

In the Linux kernel, the following vulnerability has been resolved: igb: revert rtnllock that causes deadlock The commit 6faee3d4ee8b "igb: Add lock to avoid data race" adds rtnllock to eliminate a false data race shown below FREE from device detaching | USE from netdev core igbremove |...

kernel: drm/ttm: Fix a NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix a NULL pointer dereference The LRU mechanism may look up a resource in the process of being removed from an object. The locking rules here are a bit unclear but it looks currently like res-bo assignment is protected ...