CVE-2024-0230: Undefined Security Weakness

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

PT-2024-1415

Name of the Vulnerable Software and Affected Versions Magic Keyboard versions prior to 2.0.6 Description A session management issue was addressed with improved checks. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

About the security content of Magic Keyboard Firmware Update 2.0.6

About the security content of Magic Keyboard Firmware Update 2.0.6 This document describes the security content of Magic Keyboard Firmware Update 2.0.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation h...

Apple Magic Keyboard Security Flaw

The Apple Magic Keyboard is a wireless keyboard from Apple, Inc. A security vulnerability exists in Apple Magic Keyboard, which stems from a session management issue that allows an attacker with access to the physical accessory to extract its Bluetooth pairing key and monitor Bluetooth...

Exploit for Improper Authentication in Google Android

Hi, My Name is Keyboard This repository contains proof-of-con...

CVE-2023-41784

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

CVE-2023-41784

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

CVE-2023-41784 Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

CVE-2023-41784 Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

CVE-2023-41784

CVE-2023-41784 affects ZTE Red Magic 8 Pro and is described as a Permissions and Access Control vulnerability (improper access control). The NVD entry lists a local attack vector with low attack complexity, no privileges required, but user interaction required, and it can impact confidentiality (...

CVE-2023-41784: Improper Privilege Management

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

ZTE Red Magic 8 Pro Security Vulnerability

ZTE Red Magic 8 Pro is a gaming smartphone. A security vulnerability exists in the ZTE Red Magic 8 Pro GENCNNX729JV1.0.0B21MR version, which stems from the presence of an improper access control vulnerability. An attacker can exploit the vulnerability to gain unauthorized access to the relevant...

PT-2024-12974 · Zte · Zte Red Magic 8 Pro

Name of the Vulnerable Software and Affected Versions: ZTE Red Magic 8 Pro affected versions not specified Description: The issue concerns a Permissions and Access Control Vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or detai...

CVE-2024-0196

A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2024-0196

A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed ...

Code injection

A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2024-0196 Magic-Api code injection

A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2024-0196

CVE-2024-0196 (Magic-Api) affects Magic-Api versions up to 2.0.1. The vulnerability is a code injection in an unknown functionality exposed via the HTTP endpoint /resource/file/api/save?auto=1, which can be exploited remotely. Multiple connected sources confirm code execution risk and public disc...

CVE-2024-0196 Magic-Api code injection

A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed ...

Magic-Api Code Injection Vulnerability

magic-api is sssssssss-team open source a Java-based interface rapid development framework . A code injection vulnerability exists in Magic-Api version 2.0.1 and earlier versions. Attackers exploit this vulnerability to cause code injection...