GNU screen v4.9.0 - Privilege Escalation Exploit

Exploit Title: GNU screen v4.9.0 - Privilege Escalation Date: 03.02.2023 Exploit Author: Manuel Andreas Vendor Homepage: https://www.gnu.org/software/screen/ Software Link: https://ftp.gnu.org/gnu/screen/screen-4.9.0.tar.gz Version: 4.9.0 Tested on: Arch Linux CVE : CVE-2023-24626 import os impor...

Huawei HarmonyOS Buffer Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an out-of-bounds read/write issue in the Multi-Screen Framework module...

JTEKT ELECTRONIC Screen Creator Advance 2 vulnerable to improper restriction of operations within the bounds of a memory buffer

Overview Screen Creator Advance 2 provided by JTEKT ELECTRONICS CORPORATION is vulnerable to improper restriction of operations within the bounds of a memory buffer CWE-119 due to improper check of its data size when processing a project file. Michael Heinzl reported this vulnerability to...

Mozilla Firefox Android Full-screen Spoofing

The vulnerability in the full-screen notification mode of the Mozilla Firefox browser on Android operating systems relates to the absence of warnings about dangerous actions when loading pop-up windows for downloaded files. Exploiting this vulnerability allows a remote attacker to carry out...

Mozilla Firefox Android Full-screen Spoofing

The vulnerability in the full-screen notification mode of the Mozilla Firefox browser on Android operating systems relates to the absence of warnings about dangerous actions when loading suggestion windows. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...

Exploit for Inadequate Encryption Strength in Argussurveillance Dvr

Argus Surveillance DVR 4.0 - Weak Password Encryption CVE-2...

PT-2023-2242 · Unknown · Screen Creator Advance 2

Name of the Vulnerable Software and Affected Versions: Screen Creator Advance 2 versions 0.1.1.4 Build01A and earlier Description: The issue is related to improper restriction of operations within the bounds of a memory buffer. This can be exploited if a user opens a specially crafted project fil...

Koyo Electronics Industries Screen Creator Advance 2 Buffer Error Vulnerability

Koyo Electronics Industries Screen Creator Advance 2 is a drawing program for the GC-A2 series from Koyo Electronics Industries, Japan. A security vulnerability exists in Koyo Electronics Industries Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier versions, which results from improper...

CVE-2022-27648

This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-27648

This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-27648

CVE-2022-27648 affects KOYO Screen Creator 0.1.1.1. The flaw is in parsing of SCA2 files where the length of user-supplied data is not validated before copying to a fixed-length stack-based buffer, enabling remote code execution when a user visits a malicious page or opens a malicious file. Attac...

CVE-2022-27648

This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-27648

This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-27648: Stack-based Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

SUSE: Security Advisory (SUSE-SU-2023:0469-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2023-0057)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple iOS and iPadOS security vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS. An attacker exploited the vulnerability to create bookmark...

Google Pixel security vulnerabilities

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a logic error where the lock screen may be delayed...

CWA for Chrome OS 23.3.0.40 - keyboard is unresponsive inside the Citrix session

Symptom 1: The keyboard is non-responsive when running in Kiosk mode though it is responsive at the Citrix login in kiosk mode users can enter their username and password but becomes non-responsive inside the Citrix session. Symptom 2: 1. Launch CWA for Chrome OS desktop session 2. Go to the full...