CVE-2016-11027

CVE-2016-11027 affects Samsung mobile devices running M(6.0) software. In the Shade Locked state, a physically proximate attacker can read notifications on the lock screen. The entry provides the Samsung ID SVE-2016-7132 but does not specify exploit details, affected models, versions beyond Andro...

CVE-2016-11027

An issue was discovered on Samsung mobile devices with M6.0 software. In the Shade Locked state, a physically proximate attacker can read notifications on the lock screen. The Samsung ID is SVE-2016-7132 December 2016...

Black screen at logon to MCS provisioned, ICa, RDP, and via console

User published image from App Layering. Published image worked normally, they were able to logon. The provisioned the machine via MCS. When they logon to the provisioned machine, they get a black screen. They are able to launch task manager and start a new task for Explorer. The desktop appears...

CVE-2020-9775

An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time...

CVE-2020-9775

An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time...

CVE-2020-9775

An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time...

Code injection

An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time...

CVE-2020-9775

An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time...

Authentication Bypass

gnome-shell is vulnerable to authentication bypass. The vulnerability exists as it was possible to bypass a partial lock screen...

gnome-shell: partial lock screen bypass

A vulnerability was found where the gnome-shell lock screen, since version 3.15.91, does not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts and potentially other actions. This vulnerability was fixed in...

GLSA-202003-62 : GNU Screen: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202003-62 GNU Screen: Buffer overflow A buffer overflow was found in the way GNU Screen treated the special escape OSC 49. Impact : A remote attacker, by writing a specially crafted string of characters to a GNU Screen window, cou...

GNU Screen: Buffer overflow

Background GNU Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells. Description A buffer overflow was found in the way GNU Screen treated the special escape OSC 49. Impact A remote attacker, by writing a specially...

Design/Logic Flaw

In the login screens in agent and customer interface, Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: OTRS Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions...

Huawei Desktop Cloud Windows Virtual Desktop Proxy Service hdpCommunication application suffers from a malicious lock screen vulnerability

Founded in 1987, Huawei Technologies Co. Ltd. is a global provider of ICT information and communications infrastructure and smart terminals. A malicious lock screen vulnerability exists in the Huawei Desktop Cloud Windows Virtual Desktop Agent Service hdpCommunication application, which can be...

Unspecified Vulnerability in Apple iOS and iPadOS Safari Component

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Safari is a component of the Safari browser.Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in the Safari component of Apple iOS pri...

CVE-2020-6810

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and...

Turning an OBD-II reader into a USB / NFC attack tool

One of my favourite sorts of hardware hacking is making a device do something it was never intended for. It's creative, disruptive, and fun. Everyone has their own way of going about things. Different methodologies, habits, and skill sets mean that approaches will be diverse. This is how I work...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-34740)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An unspecified vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to establish a connection between a Samsung device and a new Bluetooth device while...

Samsung Mobile Device Information Disclosure Vulnerability (CNVD-2020-33782)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An information disclosure vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to view notifications on a locked screen...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-40832)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to conduct brute force attacks on screen lock passwords...