CVE-2022-39909

Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link...

CVE-2022-39909

Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link...

Authorization

Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link...

R4Ven - Track Ip And GPS Location

Track User's Smartphone/Pc Ip And Gps Location. The tool hosts a fake website which uses an iframe to display a legit website and, if the target allows it, it will fetch the Gps location latitude and longitude of the target along with IP Address and Device Information. This tool is a Proof of...

SAMSUNG Gear IconX PC Manager 数据伪造问题漏洞

SAMSUNG Gear IconX PC Manager is used to transfer music files from PC to Gear IconX by Samsung South Korea. A security vulnerability exists in SAMSUNG Gear IconX PC Manager versions prior to 2.1.221019.51, which stems from insufficient validation of data authenticity. An attacker could exploit th...

CVE-2022-39909

CVE-2022-39909 concerns Samsung Gear IconX PC Manager. The issue is described as insufficient verification of data authenticity in versions before 2.1.221019.51, allowing local attackers to create arbitrary files via symbolic links. Connected sources (Red Hat, CNNVD, CVE listings, PT-Security) co...

CVE-2022-39909

Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link...

CVE-2022-45479

PC Keyboard allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

Nadesiko3 OS Command Injection vulnerability

OS command injection vulnerability in Nadesiko3 PC Version v3.3.68 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product. Release notes for versions 3.3.62 and 3.3.69 both link to patches for this particular issue. The...

Command injection

OS command injection vulnerability in Nako3edit, editor component of nadesiko3 PC Version v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product...

BEApps Mobile PC Keyboard 访问控制错误漏洞

BEApps Mobile PC Keyboard is an application from BEApps Mobile. Type what you want on your phone and it will automatically type it on your computer. A security vulnerability exists in versions prior to BEApps Mobile PC Keyboard v30, which stems from a vulnerability that allows an unauthenticated...

nadesiko3 操作系统命令注入漏洞

nadesiko3 is a Japanese programming language by the individual developer of kujirahand. A security vulnerability exists in nadesiko3 PC version v3.3.74 and earlier versions, which originates from a vulnerability that could allow a remote attacker to obtain the product's appkey and execute arbitra...

CVE-2022-42496

CVE-2022-42496 affects Nako3edit (editor component of nadesiko3 PC Version) up to v3.3.74. A OS command injection vulnerability in the editor allows a remote attacker to obtain the product’s appkey and execute arbitrary OS commands. The issue is exploitable over the network with no privileges req...

CVE-2022-45479

PC Keyboard allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2022-41642

OS command injection vulnerability in Nadesiko3 PC Version v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product...

CVE-2022-41642

CVE-2022-41642 affects Nadesiko3 (PC Version). v3.3.61 and earlier are vulnerable to an OS command injection during compression/decompression. The issue also covers 3.3.62–3.3.68; patch to 3.3.69 or later to fix. Sources indicate the most recent patch is 3.3.69; no exploitation status is provided...

CVE-2022-45479

CVE-2022-45479 is documented across multiple sources as a remote, unauthenticated code-execution vulnerability affecting PC Keyboard (BEApps Mobile). The vulnerability allows an attacker to send instructions to the server to execute arbitrary code without prior authorization. Public entries consi...

CVE-2022-41642

OS command injection vulnerability in Nadesiko3 PC Version v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product...

CVE-2022-45480

PC Keyboard WiFi & Bluetooth allows an attacker in a man-in-the-middle position between the server and a connected device to see all data including keypresses in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N...

Time to uninstall! Abandoned Android apps pack a vulnerability punch

Synopsis has published an advisory warning of multiple vulnerabilities across three different Android remote mouse and keyboard apps with a combined install count of about two million. The apps are at risk from remote code execution RCE, and theres no sign of a fix coming anytime, ever. Bleeping...