February 15, 2022—KB5010414 (OS Build 22000.527) Preview

None None...

PeerTube Server-Side Request Forgery Vulnerability (CNVD-2022-18320)

PeerTube is a decentralized video sharing service platform. PeerTube suffers from a server-side request forgery vulnerability, which stems from the product's failure to determine that requests originate from trusted users, and can be exploited by attackers to send unintended requests to the serve...

CVE-2022-24002

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...

CVE-2022-24002

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...

CVE-2022-24002

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...

Authorization

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...

CVE-2022-24002

Samsung Link Sharing is affected by an improper authorization vulnerability (PreconditionActivity) that could allow an attacker to open a protected activity in versions prior to 12.4.00.3. The issue is documented across multiple sources (CVE-2022-24002, Red Hat, NVD, PRION, etc.). Affected produc...

CVE-2022-24002

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...

PT-2022-16404 · Unknown · Link Sharing

Name of the Vulnerable Software and Affected Versions: Link Sharing versions prior to 12.4.00.3 Description: The issue allows attackers to open protected activity via PreconditionActivity due to an improper authorization vulnerability in Link Sharing. Recommendations: For versions prior to...

SAMSUNG Link Sharing 安全漏洞

SAMSUNG Link Sharing is a file sharing application from Samsung South Korea. It makes it easy to upload large files, high-resolution images, videos and documents saved on a Samsung Galaxy device or Samsung Pc to the Samsung Cloud for a period of time, create links to those files, and then easily...

UBUNTU-CVE-2022-23630

Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, Gradle may skip that verification and accept a dependency that would otherwise fail the build as an untrusted external artifact. This occurs when dependency verification is disabled ...

CVE-2020-10370

A lateral-movement denial of service vulnerability was found in resource-sharing Bluetooth hardware. By obtaining code execution on the Bluetooth or Wifi chip, an attacker can perform a lateral denial of service attack on a chip's shared memory resources, impacting the system's availability...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2022-22712)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft Corporation USA. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. remot...

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft Corporation USA. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and...

Microsoft OneDrive for Android security feature bypass vulnerability

Microsoft OneDrive is a cloud backup application from the US-based Microsoft Corporation Microsoft. The program has features such as automatic backup of photo albums, online office and file sharing.Microsoft OneDrive for Android has a security feature bypass vulnerability, no details of the...

CVE-2022-21817

NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing CORS vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code...

CVE-2022-21817

NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing CORS vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code...

PT-2022-15151 · Nvidia · Nvidia Omniverse Launcher

Name of the Vulnerable Software and Affected Versions: NVIDIA Omniverse Launcher affected versions not specified Description: The issue is related to a Cross-Origin Resource Sharing CORS vulnerability. This vulnerability can allow an unprivileged remote attacker to acquire access tokens, enabling...

Apple Pays $100.5K Bug Bounty for Mac Webcam Hack

A researcher who showed Apple how its webcams can be hijacked via a universal cross-site scripting bug UXSS Safari bug has been awarded what is reportedly a record $100,500 bug bounty. The bug could be used by an adversary as part of an attack to gain full access to every website ever visited by...

Apple Pays $100,500 Bounty to Hacker Who Found Way to Hack MacBook Webcam

Apple last year fixed a new set of macOS vulnerabilities that exposed Safari browser to attack, potentially allowing malicious actors to access users' online accounts, microphone, and webcam. Security researcher Ryan Pickren, who discovered and reported the bugs to the iPhone maker, was compensat...