33 matches found
ServiceCheater
CVE-2020-0108 포그라운드 서비스 권한 상승 취약점 분석 1. 취약점 배경 AOSP 2020-08 패치에서 프레임워크 계층 AMS의 취약점이 공개되었으며, 번호는 CVE-2020-0108, 등급은 High입니다. AMS의 포그라운드 서비스 처리에 있는 논리적 취약점으로, 이 취약점을 성공적으로 악용한 공격자는 포그라운드 서비스의 알림 표시를 우회하고 계속해서 백그라운드에서 실행할 수 있습니다. 공격은 로컬의 악성 앱에 의해 시작되며 사용자 상호 작용이 필요하지 않습니다. 사용자가 앱에 다른 권한을 부여한 경우 위치 지...
CVE-2020-13277
CVE-2020-13277 CVE-2020-13277 랩: Gitlab 논리적 취약점 - 임의 사용자가 권한을 초과하여 개인 저장소에 접근 0x10 랩 환경 0x20 디렉터리 구조 CVE-2020-13277 ├── README.md ............... 이 README 설명 ├── imgs .................... README 설명을 돕는 이미지 ├── gitlab .................. Gitlab 컨테이너의 마운트 디렉터리 │ ├── Dockerfile .......... Gitlab의...
imbyter-WinRAR_CVE-2023-38831
💥 WinRAR 취약점 설명 CVE-2023-38831 WinRAR 버전 6.23 이전에는 파일 확장자 속임 취약점이 존재합니다. 공격자는 이 취약점을 이용하여 특수 제작된 압축 파일에 JPG .jpg 이미지 파일, 텍스트 파일 .txt, PDF 문서 .pdf 등 무해해 보이는 파일을 포함시키고, 사용자가 압축을 풀지 않고 해당 파일을 직접 열도록 유도하여 피해자 시스템에서 임의 코드를 실행할 수 있습니다. 취약점 번호: CVE-2023-38831 취약점 유형: 논리적 취약점 소프트웨어 이름: RARLAB WinRAR 모듈 이...
CVE-2024-7697
Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...
CVE-2024-7697
Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...
CVE-2024-7697 Logical vulnerability in com.transsion.carlcare
Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...
CVE-2024-7697
CVE-2024-7697 affects the mobile app com.transsion.carlcare and is described as a logical vulnerability that may lead to user information leakage. CVSS v3.1 base score 7.5 (HIGH) with Network attack vector, Low attack complexity, no privileges, no user interaction required. The connected document...
CVE-2024-7697 Logical vulnerability in com.transsion.carlcare
Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...
CVE-2024-7697: Exposure of Private Personal Information to an Unauthorized Actor
Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...
PT-2024-38517
Name of the Vulnerable Software and Affected Versions Transsion Carlcare App affected versions not specified Description A logical vulnerability in the Transsion Carlcare mobile application may lead to user information leakage risks. Recommendations At the moment, there is no information about a...
Logic Vulnerabilities in the New Business Warfare Sandbox System of Xindao Technology Co.
New Way Technology Co., Ltd. is an enterprise management software and enterprise Internet service provider. A logic vulnerability exists in the Xindao New Business Warfare Sandbox system of Xindao Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...
Logic Vulnerabilities in the Lock Group Management System of Jiangsu Esso Electronic Technology Co.
Ltd. is specialized in substation video monitoring system, passive intelligent lock group management system development, power intelligent auxiliary monitoring system, distribution room monitoring system, intelligent access control system, production and sales of high-tech enterprises. Ltd. lock...
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
This article is for me at Bluehat Shanghai 2019 presentation of an extended summary. In this article, I will summarize the 2010 to 2018 years of Office-related 0day/1day vulnerability. I will be for each type of vulnerability do once carded, and for each vulnerability related to the analysis of t...
YxtCMF the latest version of a logical vulnerability
No description provided by source...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...
Get the passenger and the owner of the personal information? This note Uber logical vulnerability“combination punches”worth a look-vulnerability warning-the black bar safety net
! Uber recently finally opened up its vulnerability reward program, and encourage white-hat gate expand on the Uber online service vulnerability mining. Please with FreeBuf xiaobian together look at this a few logical loopholes the formation of“combination of Boxing” it. Information collected...
Mail.ru: Logical Vulnerability : REDIRECTING on pw.mail.ru by Parameter Spoofing
Hi Mail.ru, I was surfing in your website and i was trying to find a Reflected Cross-site Scripting Vulnerability , So i was trying to find a way to inject my payload in a LINK . While Surfing i've found this link : https://pw.mail.ru/validate/index.html?refurl=pw.mail.ru Screenshot :...
KesionIMalv2.5逻辑漏洞（DEMO演示）
简要描述： RT 详细说明： demo地址：http://imall.kesion.com 修改购物车内商品数量时，抓包修改为-1，提交订单后，点击支付，该订单直接支付成功。 ht...
IdeaCMS built Station system universal vulnerability affects thousands of sites-vulnerability warning-the black bar safety net
IdeaCMS based on the ASP+MSSQL/ACCESS technology development from 2 0 0 8 released in the first version since, every year, we are on a program to do a larger version of the update, so far has released six major versions. IdeaCMS in a simple, efficient, flexible, easy to use, open source, template...