491 matches found
PT-2022-23006 · Asustek · Asustek Aura Ready Game Sdk
Name of the Vulnerable Software and Affected Versions: ASUSTeK Aura Ready Game SDK service GameSDK.exe version 1.0.0.4 Description: The issue is related to an unquoted service path in the ASUSTeK Aura Ready Game SDK service. This might allow a local user to escalate privileges by creating a...
it.hiltoneventreadyplaybook.com Cross Site Scripting vulnerability OBB-2659332
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
June 14, 2022—KB5014748 (Monthly Rollup)
None None...
PT-2022-29374
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the use of virtio device ready in virtio device restore. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-29702
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the use of virtio device ready in virtio device restore. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
CVE-2021-3898
Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify the server certificate which could lead to the communication channel being accessible by an attacker...
CVE-2021-3898
Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify the server certificate which could lead to the communication channel being accessible by an attacker...
CVE-2021-3898
The CVE-2021-3898 issue affects Motorola Ready For and Motorola Device Help Android apps prior to 2021-04-08, caused by improper verification of server certificates. The root cause enables an attacker to access the communication channel. Reported impacts include potential confidentiality exposure...
Motorola Ready For 信任管理问题漏洞
Motorola Ready For is a feature from Motorola USA. It enhances the functionality of a cell phone by connecting it to any display or monitor1,2. A security vulnerability exists in Motorola Ready For that stems from the application's inability to properly validate server certificates. An attacker...
PT-2022-10825
Name of the Vulnerable Software and Affected Versions Motorola Ready For and Motorola Device Help Android applications versions prior to 2021-04-08 Description The issue is related to the improper verification of the server certificate in the affected applications, which could allow an attacker t...
CVE-2021-3898: Improper Certificate Validation
Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify the server certificate which could lead to the communication channel being accessible by an attacker...
Phishing-kit market: what’s inside “off-the-shelf” phishing packages
What are phishing kits? One of the most common tricks scammers use in phishing attacks is to create a fake official page of a famous brand. Attackers tend to copy design elements from the real website, which is why users can find it hard to distinguish the fake pages from the official ones. Even...
CVE-2021-39173
Cachet is an open source status page system. Prior to version 2.5.1 authenticated users, regardless of their privileges User or Admin, can trick Cachet and install the instance again, leading to arbitrary code execution on the server. This issue was addressed in version 2.5.1 by improving the...
ELECOM 多款产品操作系统命令注入漏洞
The Elecom ELECOM WRC and ELECOM WRH are both home-ready network cameras from Elecom Japan. A security vulnerability exists in several ELECOM products, which can be exploited by an unauthenticated, network-adjacent attacker to execute arbitrary OS commands via unspecified vectors. The following...
PT-2021-28111
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which can cause a crash. Technical details include a crash type of Heap-use-after-free WRITE 8, and th...
Virtual Hackathon Generates Next Generation of Imperva Innovation
“How do we run a global hackathon amid a global pandemic?” That was my first thought when I began planning the 2020 Imperva Hackathon earlier this year. While the event is designed to foster innovation and uncover new ideas, in a global company like ours it’s also about making new friends and...
PT-2020-21927
Name of the Vulnerable Software and Affected Versions uWS affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the us internal dispatch ready poll function, which is called by us loop run and ultimately by...
PT-2020-22351
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as crc32, update crc, and push data ready. No information...
kernel: net/mlx5e: Check for NOT_READY flag state after locking
A race condition was found in the Linux kernel Mellanox mlx5 network driver's traffic control offload flow management. A local user with privileges to configure traffic control flower filters can trigger concurrent flow deletion operations where the NOTREADY flag is checked before acquiring the...