CVE-2023-42530

CVE-2023-42530 affects Samsung Mobile SecSettings prior to SMR Nov-2023 Release 1. The vulnerability is an improper access control that allows enabling Wi‑Fi and Wi‑Fi Direct without user interaction. Reported impact includes potential high integrity impact (I:H) and high confidentiality/availabi...

CVE-2023-42529

Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code...

CVE-2023-42529

Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code...

CVE-2023-42529

The CVE-2023-42529 vulnerability affects the libsec-ril component in Samsung Mobile devices. It is described as an out-of-bounds write that allows a local attacker to execute arbitrary code. The issue is reported to affect versions prior to the SMR Nov-2023 Release 1, with remediation guidance to...

CVE-2023-42528

Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-42528

CVE-2023-42528 affects Samsung devices via the libsec-ril component, specifically the ProcessNvBuffering path. The root cause is improper input validation, enabling a local attacker to execute arbitrary code. The vulnerability is tied to Samsung’s SMR November 2023 Release 1 remediation; affected...

CVE-2023-42527

Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information...

CVE-2023-42527

CVE-2023-42527 affects libsec-ril, specifically ProcessWriteFile, with improper input validation prior to Samsung SMR Nov-2023 Release 1. A local attacker could expose sensitive information by exploiting this vulnerability. The issue impacts Samsung mobile devices using libsec-ril and is fixed by...

CVE-2023-30739

Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30739

Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30739

Summary (CVE-2023-30739): The issue is an Arbitrary File Descriptor Write vulnerability in the libsec-ril module. The initial description and corroborating sources indicate the root cause is a write to a file descriptor that can be manipulated by a local attacker, enabling arbitrary code executio...

PT-2023-28400 · Unknown · Chooseractivity

Name of the Vulnerable Software and Affected Versions: ChooserActivity versions prior to SMR Nov-2023 Release 1 Description: The issue is related to improper input validation in ChooserActivity, which allows local attackers to read arbitrary files with system privilege. Recommendations: For...

PT-2023-28403 · Libsaped · Libsaped

Name of the Vulnerable Software and Affected Versions: libsaped versions prior to SMR Nov-2023 Release 1 Description: The issue is related to improper input validation in the get head crc function in libsaped, allowing local attackers to cause out-of-bounds read and write. Recommendations: For...

Security Bulletin: Vulnerabilities in IBM Java Runtime affecting Tivoli Netcool/OMNIbus (Multiple CVEs)

Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by Tivoli Netcool/OMNIbus. These were disclosed as part of the IBM Java SDK updates in November 2022 and February 2023. Vulnerability Details CVEID:CVE-2022-21426 DESCRIPTION: An...

New Botnet named Zerobot Exploiting Multiple Vulnerabilities

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A new botnet named ‘Zerobot’ has two variants, both are written in Go programming language, the first variant discovered on 18 Nov 2022, and within a short time on 24 Nov 2022 second variant was...

rejent.com.pl Cross Site Scripting vulnerability OBB-3073564

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

spielecken.de Cross Site Scripting vulnerability OBB-3072832

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nszzpkielce.pl Cross Site Scripting vulnerability OBB-3071249

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

seeu.edu.mk Cross Site Scripting vulnerability OBB-3052279

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Updates for Microsoft Exchange Server (Nov 2022)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the Nov, 2022 security bulletin. - Microsoft Exchange Server Spoofing Vulnerability CVE-2022-41078, CVE-2022-41079 - Microsoft Exchange...