Improper access control

Improper access control in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to access device information...

CVE-2022-36866

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

CVE-2022-36865

Improper access control in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to access device information...

CVE-2022-36865

CVE-2022-36865 affects Samsung Group Sharing on Android devices: improper access control in Group Sharing allows attackers to access device information. Affected: Android S (12) prior to 13.0.6.15 and Android R (11) prior to 13.0.6.14. Remediation: update to 13.0.6.15 or later. Exploit details ar...

CVE-2022-36866

The CVE-2022-36866 issue affects Samsung’s Broadcaster in Group Sharing prior to versions 13.0.6.15 (Android S 12) and 13.0.6.14 (Android R 11). Root cause: improper access control in Broadcaster allows attackers to identify the device. Affected products and versions are documented in multiple so...

PT-2022-23669 · Google · Android

Name of the Vulnerable Software and Affected Versions: Group Sharing versions prior to 13.0.6.15 Description: The issue is related to improper access control in Group Sharing, allowing attackers to access device information. This affects devices running Android S12 and earlier versions, with...

Samsung Mobile Devices security vulnerabilities

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Android S12 prior to version 13.0.6.15 and Android R11 prior to version 13.0.6.14, which ste...

Samsung Mobile Devices security vulnerabilities

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Android S12 prior to version 13.0.6.15 and Android R11 prior to version 13.0.6.14, which ste...

PT-2022-23670 · Google · Android

Name of the Vulnerable Software and Affected Versions: Broadcaster in Group Sharing versions prior to 13.0.6.15 in Android S12 Broadcaster in Group Sharing versions prior to 13.0.6.14 in Android R11 and below Description: The issue is related to improper access control, allowing attackers to...

CVE-2022-36866: Improper Access Control

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

CVE-2022-36865: Improper Access Control

Improper access control in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to access device information...

Hauk Trust Management Vulnerabilities

Hauk is a fully open source, self-hosted location sharing service from the individual developer Marius Lindvall. A security vulnerability exists in Hauk v1.6.1, which stems from hardcoded passwords stored in plaintext in the config.php file on the server side and on the android client device...

WordPress Twenty Seventeen 3.0 Cross-origin resource sharing information Vulnerability

Title: WordPress 6.0.2 - THEME - Twenty Seventeen: 3.0- CORS-Vulnerability Author: nu11secur1ty Vendor: https://wordpress.org/ Software: Twenty SeventeenVersion: 3.0 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Twenty-Seventeen-3.0 Description: The...

CVE-2022-2775

creationtimestamp| type| source ---|---|--- 2022-09-05 16:12:19+00:00| seen| https://t.me/cibsecurity/49292 2025-09-09 20:51:37+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2022-36035 Flux CLI Workload Injection

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration like Git repositories, and automating updates to configuration when there is new code to deploy. Flux CLI allows users to deploy Flux components into a Kubernetes cluster via command-line. The vulnerability allow...

How to set up an iPhone for your kids

Thanks to Thomas Reed for his expertise and guidance. This is it. After much hemming and hawing, you've finally given in and bought your child their first smartphone, which you plan to give to them before the school year starts. But before you give it to them, it's worth sitting them down to talk...

CVE-2022-0168

A denial of service DOS issue was found in the Linux kernel’s smb2ioctlqueryinfo function in the fs/cifs/smb2ops.c Common Internet File System CIFS due to an incorrect return from the memdupuser function. This flaw allows a local, privileged CAPSYSADMIN attacker to crash the system...

MERCURY leveraging Log4j 2 vulnerabilities in unpatched systems to target Israeli organizations

In recent weeks, the Microsoft Threat Intelligence Center MSTIC and Microsoft 365 Defender Research Team detected Iran-based threat actor MERCURY leveraging exploitation of Log4j 2 vulnerabilities in SysAid applications against organizations all located in Israel. MSTIC assesses with high...

CVE-2022-2031

A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other...

CVE-2022-35733

creationtimestamp| type| source ---|---|--- 2022-08-23 07:21:10+00:00| seen| https://t.me/cibsecurity/48570 2024-06-21 18:06:04+00:00| exploited| https://t.me/itsecnews/4508 2026-04-10 09:39:31+00:00| seen| MISP/390462c4-7cd4-4967-94d8-6f5a07d8cfd9 2026-07-26 00:00:12+00:00| seen|...