CVE-2022-41931 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui

xwiki-platform-icon-ui is vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection'. Any user with view rights on commonly accessible documents including the icon picker macro can execute arbitrary Groovy, Python or Velocity code in XWiki due to improper...

CVE-2022-41874

Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri is vulnerable to an Incorrectly-Resolved Name. Due to incorrect escaping of special characters in paths selected via the file dialog and drag and drop functionality, it is...

Design/Logic Flaw

Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri is vulnerable to an Incorrectly-Resolved Name. Due to incorrect escaping of special characters in paths selected via the file dialog and drag and drop functionality, it is...

Tauri Filesystem Scope can be Partially Bypassed

Impact Due to incorrect escaping of special characters in paths selected via the file dialog and drag and drop functionality, it was possible to partially bypass the fs scope definition. It was not possible to traverse into arbitrary paths, as the issue was limited to neighboring files and sub...

GHSA-Q9WV-22M9-VHQH Tauri Filesystem Scope can be Partially Bypassed

Impact Due to incorrect escaping of special characters in paths selected via the file dialog and drag and drop functionality, it was possible to partially bypass the fs scope definition. It was not possible to traverse into arbitrary paths, as the issue was limited to neighboring files and sub...

CVE-2022-33727

A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack...

CVE-2022-33727

A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung. A security vulnerability exists in the SAMSUNG Mobile devices SecDevicePickerDialog module, versions prior to SMR Aug-2022 Release 1, which is caused due to...

Vulnerability of the Windows.Devices.Picker.dll library in operating systems, allowing attackers to escalate their privileges

The vulnerability of the Windows.Devices.Picker.dll library in operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-22045

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability...

CVE-2022-22045

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability...

CVE-2022-22045

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability...

Privilege escalation

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability...

CVE-2022-22045 Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

...

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

...

PT-2022-3725 · Microsoft · Windows.Devices.Picker.Dll +1

Name of the Vulnerable Software and Affected Versions: Windows.Devices.Picker.dll affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows.Devices.Picker.dll library of Windows operating systems. It allows an attacker to elevate their...

Malicious code in mitui-comp-tag-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b76c76ef883185b36203df9457e86bbd6a4054f008255cceb2c08a5f522ed83e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4624 Malicious code in mitui-comp-tag-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b76c76ef883185b36203df9457e86bbd6a4054f008255cceb2c08a5f522ed83e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wf-react-day-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7658e188c01b95c2094d6883c614c8a11042e58f4984d7ae00cc19f7b1ec2236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-796 Malicious code in @zohocalendar/color-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 018ff1f8a690ddf8dc7352e23396e32046f51398b2d4457ceeed66230f49f832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...