Information disclosure

An issue in the PowerOffWidgetReceiver function of Super Reboot Root Recovery v1.0.3 allows attackers to arbitrarily reset or power off the device via a crafted intent...

CVE-2023-47889

The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly...

CVE-2023-47354

CVE-2023-47354 affects Super Reboot (Root) Recovery v1.0.3, where the PowerOffWidgetReceiver function can be triggered by a crafted Intent to arbitrarily reset or power off the device. Multiple connected sources (NVD, Red Hat, CVE listings) describe the issue and attribute an attack vector of LOC...

CVE-2023-47354

An issue in the PowerOffWidgetReceiver function of Super Reboot Root Recovery v1.0.3 allows attackers to arbitrarily reset or power off the device via a crafted intent...

Super Reboot (Root) Recovery Security Vulnerability

Super Reboot Root Recovery is a mobile desktop software by actuator Personal Developer. A security vulnerability exists in Super Reboot Root Recovery version 1.0.3 that originates from allowing any application on the device to send unauthorized broadcasts...

CVE-2023-47355

The com.eypcnnapps.quickreboot aka Eyuep Can Yilmaz ROOT Quick Reboot application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery e.g., com.eypcnnapps.quickreboot.widget.PowerOff that are susceptible to unauthorized broadcasts because of missing input validati...

Input validation

The com.eypcnnapps.quickreboot aka Eyuep Can Yilmaz ROOT Quick Reboot application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery e.g., com.eypcnnapps.quickreboot.widget.PowerOff that are susceptible to unauthorized broadcasts because of missing input validati...

PT-2024-13530 · Unknown · Com.Bdrm.Superreboot

Name of the Vulnerable Software and Affected Versions: com.bdrm.superreboot version 1.0.3 Description: The Android application exposes several critical actions through its exported broadcast receivers, allowing any app on the device to send unauthorized broadcasts. This can lead to unintended...

Quick Reboot Security Vulnerability

Quick Reboot is an application for Android. A security vulnerability exists in Quick Reboot version 1.0.8, which stems from a lack of input validation and leaves the receiver vulnerable to unauthorized broadcasts...

CVE-2023-47355

The com.eypcnnapps.quickreboot aka Eyuep Can Yilmaz ROOT Quick Reboot application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery e.g., com.eypcnnapps.quickreboot.widget.PowerOff that are susceptible to unauthorized broadcasts because of missing input validati...

CVE-2023-47355

The com.eypcnnapps.quickreboot aka Eyuep Can Yilmaz ROOT Quick Reboot application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery e.g., com.eypcnnapps.quickreboot.widget.PowerOff that are susceptible to unauthorized broadcasts because of missing input validati...

Super Reboot (Root) Recovery Security Vulnerability

Super Reboot Root Recovery is a mobile desktop software by actuator Personal Developer. A security vulnerability exists in Super Reboot Root Recovery v1.0.3, which stems from an issue in the PowerOffWidgetReceiver function that allows an attacker to arbitrarily reset or power off a device with...

CVE-2023-47355

The CVE-2023-47355 issue affects the Android app com.eypcnnapps.quickreboot (version 1.0.8). The vulnerability stems from exposed receivers (PowerOff, Reboot, Recovery, e.g., com.eypcnnapps.quickreboot.widget.PowerOff) that accept unauthorized broadcasts due to missing input validation. Impact de...

CVE-2024-24736

The POP3 service in YahooPOPs aka YPOPs! 1.6 allows a remote denial of service reboot via a long string to TCP port 110, a related issue to CVE-2004-1558...

The vulnerability of the `sysScheduleRebootSet` function in the wireless access point software of Tenda i29 allows a intruder to execute arbitrary code.

The vulnerability of the sysScheduleRebootSet function in the wireless access point software of Tenda i29 involves insufficient measures taken to protect input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

New iShutdown Method Exposes Hidden Spyware Like Pegasus on Your iPhone

Cybersecurity researchers have identified a "lightweight method" called iShutdown for reliably identifying signs of spyware on Apple iOS devices, including notorious threats like NSO Group's Pegasus, QuaDream's Reign, and Intellexa's Predator. Kaspersky, which analyzed a set of iPhones that were...

Hitachi Energy RTU500 Stack-Based Buffer Overflow (CVE-2022-2081)

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to...

CVE-2023-50920

An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID after each user reboot, allowing attackers to share session identifiers between different sessions and bypass authentication or access control measures. Attackers can impersonate legitimate users or...

Various GL.iNet products Security Breach

GL.iNet MT3000 and others are products of China's GL.iNet GL.iNet. GL.iNet MT3000 is an AX3000 portable router that uses the Wi-Fi 6 protocol. the GL.iNet AR750S is a router. the GL.iNet AR750 is a router. A security vulnerability exists in several GL.iNet products that originates from assigning...

PT-2024-14008 · Gl.Inet · Gl.Inet

Name of the Vulnerable Software and Affected Versions: GL.iNet devices versions prior to 4.5.0 Description: An issue was discovered where GL.iNet devices assign the same session ID after each user reboot, allowing attackers to share session identifiers between different sessions and bypass...