CVE-2022-31760

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality...

Design/Logic Flaw

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality...

CVE-2022-31760

CVE-2022-31760 affects Huawei HarmonyOS 2.0 where a post-lock pop-up box issue in the operator’s USSD service can lead to dialogs being shown after the screen is locked. The vulnerability may compromise data integrity and confidentiality, as described in multiple sources (NVD/Red Hat/CVE listings...

CVE-2022-31760

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality...

MAL-2022-6982 Malicious code in vso-splash-screen-terminals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a406d654e1a2ccf2bf08779d9dcf2f5c58ba3be8b211f2254a521995e7f8cdf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ASB-A-151095871

Bulletin has no description...

TikTok: IDOR in family pairing API

Vulnerability description not provided...

How To Screencast on Windows 10

By Owais Sultan Screen recorder for Windows is a useful feature that comes in handy for a variety of tasks, especially… This is a post from HackRead.com Read the original post: How To Screencast on Windows 10...

CVE-2022-26703

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. A person with physical access to an iOS device may be able to access photos from the lock screen...

CVE-2022-26726

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to capture a user's screen...

CVE-2022-26726

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to capture a user's screen...

CVE-2022-26726

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to capture a user's screen...

CVE-2022-26703

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. A person with physical access to an iOS device may be able to access photos from the lock screen...

CVE-2022-26726

CVE-2022-26726 is an Apple macOS/iOS vulnerability describing an issue where an app may be able to capture a user’s screen. The available connected references consistently state the root cause as a privilege/permission-related flaw resolved by Apple. The fixed versions are explicitly listed: Secu...

CVE-2022-26726

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to capture a user's screen...

CVE-2022-26703

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. A person with physical access to an iOS device may be able to access photos from the lock screen...

PT-2022-18016 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.5 iPadOS versions prior to 15.5 Description: An authorization issue was addressed with improved state management, allowing a person with physical access to an iOS device to potentially access photos from the lock...

May 24, 2022—KB5014019 (OS Build 22000.708) Preview

None None...

Improper Input Validation

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on SSO is enabled. In order to exploit this vulnerability,...

CVE-2022-24905

Argo CD (Kubernetes GitOps tool) has a vulnerability that lets an attacker spoof login-screen error messages when SSO is enabled. Affected versions are before 2.3.4, 2.2.9, and 2.1.15. Exploitation requires the victim to visit a specially crafted URL; the spoofed message cannot include active con...