GSD-2022-1003122 drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected

drm/msm/mdp5: Return error code in mdp5piperelease when deadlock is detected This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003117 drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected

drm/msm/mdp5: Return error code in mdp5mixerrelease when deadlock is detected This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002783 drm/msm/hdmi: check return value after calling platform_get_resource_byname()

drm/msm/hdmi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002775 drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume

drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel...

GSD-2022-1002774 drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected

drm/msm/mdp5: Return error code in mdp5mixerrelease when deadlock is detected This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002740 drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init

drm/msm/a6xx: Fix refcount leak in a6xxgpuinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002734 drm/msm: don't free the IRQ if it was not requested

drm/msm: don't free the IRQ if it was not requested This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-20972 · Marval · Marval Msm

Name of the Vulnerable Software and Affected Versions: Marval MSM version 14.19.0.12476 Description: The issue allows a low privilege user to delete other users' API Keys, including those of high privilege and the Administrator users. This is due to an Improper Access Control vulnerability...

Marval MSM 安全漏洞

Marval MSM is an innovative IT Service Management software from Marval UK. A security vulnerability exists in Marval MSM version v14.19.0.12476, which stems from an insecure Direct Object Reference IDOR vulnerability that allows even a low-privileged user to view other user's API keys, including...

Marval MSM 安全漏洞

Marval MSM is an innovative IT service management software from Marval UK. A security vulnerability exists in Marval MSM version v14.19.0.12476. An attacker has exploited the vulnerability to achieve elevation of privilege, which can be used to change the passwords of other users...

Marval MSM 安全漏洞

Marval MSM is an innovative IT service management software from Marval UK. A security vulnerability exists in Marval MSM version v14.19.0.12476. An attacker has exploited the vulnerability to delete other users API keys...

Marval MSM 操作系统命令注入漏洞

Marval MSM is an innovative IT service management software from Marval UK. A security vulnerability exists in Marval MSM version v14.19.0.12476, which stems from insecure handling of VBScript, resulting in vulnerability to operating system command injection...

Marval MSM 跨站请求伪造漏洞

Marval MSM is an innovative IT service management software from Marval UK. The Marval MSM v14.19.0.12476 release has a cross-site request forgery vulnerability that can be exploited by an attacker to disable 2FA by sending a malicious form to a user...

Marval MSM 14.19.0.12476 Remote Code Execution

Exploit Title: Marval MSM v14.19.0.12476 - Remote Code Execution RCE Authenticated Date: 27/5/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.marvalnorthamerica.com/ Software Link: https://www.marvalnorthamerica.com/ Version: v14.19.0.12476 Tested on: Windows Detailed...

Marval MSM 14.19.0.12476 Cross Site Request Forgery

Exploit Title: Marval MSM v14.19.0.12476 - Cross-Site Request Forgery CSRF Date: 27/5/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.marvalnorthamerica.com/ Software Link: https://www.marvalnorthamerica.com/ Version: v14.19.0.12476 Tested on: Windows PoCs:...

Marval MSM v14.19.0.12476 - Remote Code Execution (Authenticated) Vulnerability

Exploit Title: Marval MSM v14.19.0.12476 - Remote Code Execution RCE Authenticated Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.marvalnorthamerica.com/ Software Link: https://www.marvalnorthamerica.com/ Version: v14.19.0.12476 Tested on: Windows Detailed blog:...

Marval MSM v14.19.0.12476 - Cross-Site Request Forgery Vulnerability

Exploit Title: Marval MSM v14.19.0.12476 - Cross-Site Request Forgery CSRF Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.marvalnorthamerica.com/ Software Link: https://www.marvalnorthamerica.com/ Version: v14.19.0.12476 Tested on: Windows PoCs:...

Marval MSM v14.19.0.12476 - Remote Code Execution (RCE) (Authenticated)

Exploit Title: Marval MSM v14.19.0.12476 - Remote Code Execution RCE Authenticated Date: 27/5/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.marvalnorthamerica.com/ Software Link: https://www.marvalnorthamerica.com/ Version: v14.19.0.12476 Tested on: Windows Detailed...

Marval MSM v14.19.0.12476 - Cross-Site Request Forgery (CSRF)

Exploit Title: Marval MSM v14.19.0.12476 - Cross-Site Request Forgery CSRF Date: 27/5/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.marvalnorthamerica.com/ Software Link: https://www.marvalnorthamerica.com/ Version: v14.19.0.12476 Tested on: Windows PoCs:...

GSD-2022-1002092 drm/msm/dp: populate connector of struct dp_panel

drm/msm/dp: populate connector of struct dppanel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...