ALBA-2021:3049 pcsc-lite bug fix and enhancement update

PC/SC Lite provides a Windows SCard compatible interface for communicating with smart cards, smart card readers, and other security tokens. Bug Fixes: Increase global reader array size to 48 to address issue with RHCS secure channel creation BZ1972569 Increase global reader array size to 48 to...

pcsc-lite bug fix and enhancement update

PC/SC Lite provides a Windows SCard compatible interface for communicating with smart cards, smart card readers, and other security tokens. Bug Fixes: Increase global reader array size to 48 to address issue with RHCS secure channel creation BZ1972569 Increase global reader array size to 48 to...

pcsc-lite bug fix and enhancement update

An update is available for pcsc-lite-ccid, pcsc-lite. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PC/SC Lite provides a Windows SCard compatible interface fo...

PT-2023-12250 · Opensc +1 · Opensc +1

Name of the Vulnerable Software and Affected Versions: OpenSC smart card middleware versions prior to 0.23 Description: A stack overflow issue exists in the OpenSC smart card middleware due to crafted responses to APDUs, which can lead to a stack overflow. Recommendations: For versions prior to...

Dell Wyse ThinOS 日志信息泄露漏洞

Wyse ThinOS is a specialized operating system for Dell servers from Dell Inc. in the United States. A security vulnerability exists in Wyse ThinOS, which arises from an authenticated attacker with physical access to the system being able to read sensitive smart card data in log files...

Arcadyan Directory Traversal Vulnerability (Apr 2021) - Active Check

Arcadyan devices are prone to a directory traversal vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

SQL Injection Vulnerability in Smart Meter Integrated Management System of Xintian Technology Co.

Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A SQL injection vulnerability exists in the Smart Meter Integrated Management System of Xintian Technology Corporation, which can be exploited by attackers to obtain sensitive...

The vulnerability of the EVlink City, Parking, and Smart Wallbox software lies in the use of rigidly defined credentials. This allows a malicious actor to send unauthorized commands to the web server with administrative privileges.

The vulnerability of the EVlink City, Parking, and Smart Wallbox software systems lies in the use of rigidly defined credentials. Exploiting this vulnerability could allow an attacker to remotely send unauthorized commands to the web server with administrative privileges...

CVE-2021-25448

Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...

CVE-2021-25448

Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...

Improper access control

Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...

CVE-2021-25448

Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...

CVE-2021-25448

CVE-2021-25448 affects Samsung Smart Touch Call prior to version 1.0.0.5, due to an improper access control vulnerability in the webview component that allows loading arbitrary web pages. Affected software is specified as Smart Touch Call (prior to 1.0.0.5); Root cause is improper access control ...

Admin and treasury change should be confirmed.

Handle tensors Vulnerability details Impact Inputting the wrong address here could lock out a lot of the funds and smart contract methods. Proof of Concept Recommended Mitigation Steps Require the changed address to confirm the switch with a pendingAdmin, pendingTreasury variable. --- The text wa...

PT-2021-16638 · Unknown · Smart Touch Call

Name of the Vulnerable Software and Affected Versions: Smart Touch Call versions prior to 1.0.0.5 Description: The issue is related to improper access control, allowing arbitrary webpage loading in the webview component. Recommendations: For versions prior to 1.0.0.5, update to version 1.0.0.5 or...

SAMSUNG Smart Touch Call 安全漏洞

SAMSUNG Smart Touch Call is a smart call application from Samsung South Korea. lets users know immediately that a call is spam, blocks the call, and then lets users report the call. A security vulnerability exists in SAMSUNG Smart Touch Call prior to version 1.0.0.5, which stems from an improper...

Weak password vulnerability in SRG3230 of Huawei Technologies Co.

Huawei Technologies Co. Ltd. is an ICT information and communications infrastructure and smart terminal provider. A weak password vulnerability exists in Huawei Technologies Co Ltd SRG3230, which can be exploited by attackers to obtain sensitive information...

CVE-2021-34270

An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses...

CVE-2021-34272

A security flaw in the 'owned' function of a smart contract implementation for RobotCoin RBTC, a tradeable Ethereum ERC20 token, allows attackers to hijack victim accounts and arbitrarily increase the digital supply of assets...

CVE-2021-34273

A security flaw in the 'owned' function of a smart contract implementation for BTC2X B2X, a tradeable Ethereum ERC20 token, allows attackers to hijack victim accounts and arbitrarily increase the digital supply of assets...