CVE-2023-42541

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id...

Authorization

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id...

Improper access control

Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device...

CVE-2023-42542

The CVE-2023-42542 issue is an improper access control in Samsung Push Service prior to version 3.4.10. It allows a local attacker to obtain a device register ID, enabling device identification. Affected software: Samsung Push Service up to version 3.4.9.0 (prior to 3.4.10). Root cause: inadequat...

CVE-2023-42542

Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device...

CVE-2023-42542

Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device...

CVE-2023-42541

CVE-2023-42541 affects Samsung Push Service (PushClientProvider). The issue is improper authorization that, in versions prior to 3.4.10, could allow an attacker to access a unique ID. Evidence from multiple sources confirms the affected software, the vulnerable component (PushClientProvider), and...

CVE-2023-42541

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id...

CVE-2023-42541

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to version 3.4.10, which stems from improper authorization in the PushClientProvider o...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to version 3.4.10, which stems from an improper access control vulnerability in the...

PT-2023-28408 · Samsung · Samsung Push Service

Name of the Vulnerable Software and Affected Versions: Samsung Push Service versions prior to 3.4.10 Description: The issue is related to improper authorization in the PushClientProvider of the Samsung Push Service. This allows an attacker to access a unique id. Recommendations: For versions prio...

PT-2023-28409 · Samsung · Samsung Push Service

Name of the Vulnerable Software and Affected Versions: Samsung Push Service versions prior to 3.4.10 Description: The issue is related to improper access control, allowing local attackers to obtain a register ID that can be used to identify the device. Recommendations: For versions prior to 3.4.1...

CVE-2023-31747

Wondershare Filmora 12 Build 12.2.1.2088 was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges...

PT-2023-23445 · Wondershare · Wondershare Filmora

Name of the Vulnerable Software and Affected Versions: Wondershare Filmora 12 Build 12.2.1.2088 Description: The issue is related to an unquoted service path vulnerability via the NativePushService component. This allows attackers to launch processes with elevated privileges. Recommendations: For...

Exploit for Unquoted Search Path or Element in Wondershare Filmora

bash...

Tencent pigeon sdk application has a design logic vulnerability

Passenger Pigeon XG Push is a mobile App push platform that supports two mainstream platforms, Android and iOS. Tencent pigeon sdk application design logic vulnerabilities. Due to the Tencent pigeon sdk permission filtering is not strict, attackers can use the vulnerability can lead to override...

Samsung Push Service - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Samsung Push Service published at the 'play' market has multiple vulnerabilities...

AVM FRITZ!OS Cross-Site Scripting Vulnerability

AVM FRITZ!OS is a set of operating systems used in Fritz!Box wireless router products. A cross-site scripting vulnerability exists in the Push-Service-Mails feature of AVM FRITZ!OS, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be us...

CVE-2015-7242

Cross-site scripting XSS vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVITE message...