417 matches found
The vulnerability of the Acer Wireless Keyboard SK-9662 lies in the insufficient security of its data encryption. This allows a hacker to decode keyboard inputs or insert arbitrary keystrokes.
The vulnerability of the Acer Wireless Keyboard SK-9662 relates to insufficiently secure data encryption. Exploiting this vulnerability allows a malicious actor to decode keyboard inputs or insert arbitrary keystrokes remotely...
sk-ii.com Cross Site Scripting vulnerability OBB-3807805
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-48034
Acer Wireless Keyboard SK-9662 uses weak encryption in its wireless protocol, enabling a nearby attacker to decrypt keystrokes and inject arbitrary keystrokes. Documented as CVE-2023-48034 with CVSS v3.1 base score 6.1 (MEDIUM). Available sources confirm physical-proximity attack vector and high ...
Acer Wireless Keyboard SK-9662 Security Vulnerability
Acer Wireless Keyboard SK-9662 is a wireless keyboard from Acer China. The Acer Wireless Keyboard SK-9662 suffers from a security vulnerability that stems from the use of weak encryption in the wireless protocol, which allows an attacker to easily monitor and record keylogging and inject arbitrar...
Important: kernel
Issue Overview: A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests. CVE-2023-34324 An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic...
sk-schirnding.de Improper Access Control vulnerability OBB-3771416
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-25334
The Texas Instruments OMAP L138 secure variants trusted execution environment TEE lacks a bounds check on the signature size field in the SKLOAD module loading routine, present in mask ROM. A module with a sufficiently large signature field causes a stack overflow, affecting secure kernel data...
kernel: denial of service problem in net/unix/diag.c
A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unixdiaggetexact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service...
sk-sk.soccerwiki.org Cross Site Scripting vulnerability OBB-3672865
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sk-miyagi.co.jp Cross Site Scripting vulnerability OBB-3656762
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-40283
An issue was discovered in l2capsockrelease in net/bluetooth/l2capsock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled...
CVE-2023-24393
Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Sk. Abul Hasan Animated Number Counters plugin = 1.6 versions...
CVE-2023-24393
Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Sk. Abul Hasan Animated Number Counters plugin = 1.6 versions...
CVE-2023-24393 WordPress Animated Number Counters Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)
Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Sk. Abul Hasan Animated Number Counters plugin = 1.6 versions...
sk-maschinen.de Cross Site Scripting vulnerability OBB-3566374
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bicykel.0905.sk Cross Site Scripting vulnerability OBB-3558895
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sk-jugend.de Cross Site Scripting vulnerability OBB-3471037
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sk-alanon.ca Cross Site Scripting vulnerability OBB-3397157
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference
A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol L2TP. A missing lock when clearing skuserdata can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service...
kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference
A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol L2TP. A missing lock when clearing skuserdata can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service...