CVE-2022-26629

An Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen Security Feature function due to insufficient permissions and privileges, which allows a malicious attacker bypass the lock screen function...

CVE-2022-26629

An Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen Security Feature function due to insufficient permissions and privileges, which allows a malicious attacker bypass the lock screen function...

CVE-2022-26629

CVE-2022-26629 affects SoroushPlus+ Messenger 1.0.30. The issue is an Improper Access Control in the Lock Screen Security Feature caused by insufficient permissions/privileges, enabling a malicious actor to bypass the lock screen. Public references in connected sources include Red Hat advisory en...

PT-2022-17963

Name of the Vulnerable Software and Affected Versions SoroushPlus+ Messenger version 1.0.30 Description An Access Control issue exists in the Lock Screen Security Feature function due to insufficient permissions and privileges, allowing a malicious attacker to bypass the lock screen function...

SoroushPlus Messenger 访问控制错误漏洞

SoroushPlus Messenger is an instant messaging application by Setak Houshmand Sharif Personal Developer. SoroushPlus Messenger version 1.0.30 An Access Control Error vulnerability exists in the Lock Screen Security Feature feature, which stems from insufficient permissions and privileges, and an...

CVE-2022-26629: Incorrect Authorization

An Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen Security Feature function due to insufficient permissions and privileges, which allows a malicious attacker bypass the lock screen function...

CVE-2021-34546

An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able to drop to an administrative shell and execute arbitrary commands as SYSTEM via the "save log to...

screen security update

4.1.0-0.27.2012314git3c2946 - fix CVE-2021-26937 1927063...

chromium-browser: Incorrect security UI in full screen

Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page...

CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...

Code injection

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen...

CVE-2017-8288

gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications but not interact with them, see information from the extensions e.g., what applications you have...

[SECURITY] [DLA 305-1] screen security update

Package : screen Version : 4.0.3-14+deb6u1 CVE ID : CVE-2015-6806 Debian Bug :797624 A vulnerability was found in screen causing a stack overflow which results in crashing the screen server process, resulting in denial of service. See DSA-3352-1 for information on other Debian releases. We...