1026 matches found
CVE-2022-36870
Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...
Design/Logic Flaw
Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...
Design/Logic Flaw
Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...
Design/Logic Flaw
Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...
CVE-2022-36872
The CVE-2022-36872 entry describes a Pending Intent hijacking vulnerability in Samsung Pay’s SpayNotification component. Affected are Samsung Pay versions prior to 5.0.63 for Korea and prior to 5.1.47 for Global, where an attacker could access files without permission by exploiting an implicit In...
CVE-2022-36872
Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...
CVE-2022-36871
Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...
CVE-2022-36871
The CVE-2022-36871 issue affects Samsung Pay NotiCenterUtils and is a Pending Intent hijacking vulnerability that could allow an attacker to access files without permission via implicit Intent. Affected versions are Samsung Pay prior to 5.0.63 for Korea and prior to 5.1.47 for Global. The root ca...
CVE-2022-36870
CVE-2022-36870 concerns Samsung Pay’s MTransferNotificationManager. A pending-intent hijack in versions prior to 5.0.63 (KR) and 5.1.47 (Global) allows an attacker to access files without permission via an implicit Intent. Documents from PT-2022-23674 and related feeds specify the affected versio...
CVE-2022-36870
Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...
PT-2022-23675 · Samsung · Samsung Pay
Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 5.0.63 for KR and 5.1.47 for Global Description: The issue allows attackers to access files without permission via implicit Intent, exploiting a Pending Intent hijacking vulnerability in NotiCenterUtils...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices version 5.1.47 for international and 5.0.63 for Korea, which stems from MTransferNotificationManager ...
PT-2022-23676 · Samsung · Samsung Pay
Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 5.0.63 for KR and 5.1.47 for Global Description: The issue allows attackers to access files without permission via implicit Intent, exploiting a Pending Intent hijacking vulnerability in SpayNotification...
PT-2022-23674 · Samsung · Samsung Pay
Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 5.0.63 for KR and 5.1.47 for Global Description: The issue allows attackers to access files without permission via implicit Intent, exploiting a Pending Intent hijacking vulnerability in...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices version 5.1.47 for international and version 5.0.63 for Korea, which stems from NotiCenterUtils in...
Xiaomi Phone Bug Allowed Payment Forgery
Smartphone maker Xiaomi, the world’s number three phone maker behind Apple and Samsung, reported it has patched a high-severity flaw in its “trusted environment” used to store payment data that opened some of its handsets to attack. Researchers at Check Point Research revealed last week in a repo...
solana-base-app (0.1.5), solanapaydemo-cookies (>=1.0.0, <=1.2.0) potentially affected by CVE-2022-35917 via @solana/pay (0.1.3)
@solana/pay NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/pay and may be impacted: - solana-base-app 0.1.5 - solanapaydemo-cookies =1.0.0, =1.2.0 Source cves: CVE-2022-35917 Source advisory: OSV:GHSA-J47C-J42C-MWQQ...
Solana Pay Vulnerable to Weakness in Transfer Validation Logic
Description When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient, using the supplied validateTransfer function. An edge case regarding this mechanism could cause the validation logic to validate multiple...
GHSA-J47C-J42C-MWQQ Solana Pay Vulnerable to Weakness in Transfer Validation Logic
Description When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient, using the supplied validateTransfer function. An edge case regarding this mechanism could cause the validation logic to validate multiple...
