CVE-2024-28029

Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from the presence of uninitialized data in the ppcfwinitsecpolicy method of the ppcfw.c file, which could allow for privilege bypass...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a company owned by MediaTek of China. A security vulnerability exists in the MediaTek chips, which stems from a lack of privilege checking in the da module, which could lead to a privilege bypass issue...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of privilege checking in the aee module, which could lead to a privilege bypass issue...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a privilege bypass in the vdec module, which may exist...

CVE-2024-0036

CVE-2024-0036 describes a logic error in startNextMatchingActivity within Android’s ActivityTaskManagerService.java that could bypass restrictions on starting activities from the background, enabling local privilege escalation without extra execution privileges and without user interaction. The v...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a privilege bypass issue in the telephony module, which could lead to privilege escalation...

Apache Airflow 安全漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An information disclosure vulnerability exists in Apache Airflow versions prior to...

Silverstripe CMS GraphQL Server Security Vulnerability

Silverstripe CMS GraphQL Server is a tool that makes SilverStripe data available as a GraphQL representation. A security vulnerability exists in Silverstripe CMS GraphQL Server versions 4.x prior to 4.3.7 and 5.x prior to 5.1.3, which stems from the ability to bypass privilege checks...

IBM i Access Client Solutions Security Breach

IBM i is a suite of operating systems from International Business Machines IBM running on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i Access Client Solutions versions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3, which stems from improper privilege checking...

Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware

CVE-2023-20198 An Exploitation script developed to exploit the...

Google Android Information Disclosure Vulnerability (CNVD-2024-01368)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to a privilege bypass flaw in the Bluetooth component. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android Denial of Service Vulnerability (CNVD-2023-98749)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability, which is caused by a privilege bypass in Usage Access. An attacker can exploit this vulnerability to cause a denial of service...

Google Android Information Disclosure Vulnerability (CNVD-2023-98752)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by a privilege bypass in settings. An attacker can exploit the vulnerability to obtain sensitive information...

Google Android elevation of privilege vulnerability (CNVD-2024-05388)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a privilege bypass in onCreate of ApnEditor.java. An attacker can exploit this vulnerability to gain elevated privileges...

CloudExplorer Lite License Issue Vulnerability

CloudExplorer Lite is CloudExplorer's platform that provides out-of-the-box basic functionality for cloud hosting management, cloud billing, operational analytics, and security compliance, as well as powerful extensibility to meet the customization needs of enterprises. An authorization issue...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by a privilege bypass in settings. An attacker can exploit the vulnerability to obtain sensitive information...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability, which is caused by a privilege bypass in Usage Access. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2023-40120

CVE-2023-40120 is an Android elevation-of-privilege issue caused by improper input validation in multiple locations that bypasses user notification of foreground services. The vulnerability enables local escalation of privilege with no user interaction and is exploitable with local access. Public...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from a TBD component privilege bypass that has a possible way to access location information. This could lead to the disclosure of local information that requires system...