UBUNTU-CVE-2023-21136

In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2023-17928 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to improper input validation in multiple functions of JobStore.java, which can cause a crash on startup. This can lead to a local denial of service with no...

CVE-2023-29748

Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the...

CVE-2023-29748

Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the...

Sara Tech Story Saver 安全漏洞

Sara Tech Story Saver is a download program from Sara Tech USA. Easily download photo or video stories to Instagram. A security vulnerability exists in Sara Tech Story Saver version 1.0.6, which stems from the ability of an attacker to inject a large amount of data into any file that will be load...

PT-2023-22398 · Unknown · Story Saver For Instagram - Video Downloader

Name of the Vulnerable Software and Affected Versions: Story Saver for Instragram - Video Downloader version 1.0.6 Description: The issue allows an attacker to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. This can...

Video Downloader 安全漏洞

Video Downloader is a video download application. A security vulnerability exists in Video Downloader version 1.0.6, which stems from the fact that an attacker can modify the data in any file that is loaded into memory when the application is opened...

SAISON INFORMATION SYSTEMS DataSpider 信任管理问题漏洞

SAISON INFORMATION SYSTEMS DataSpider is a data screener from SAISON INFORMATION SYSTEMS, Japan. A trust management issue vulnerability exists in SAISON INFORMATION SYSTEMS DataSpider Servista 4.4 and earlier versions, which originates from an attacker being able to access the startup settings fi...

CVE-2023-29731

SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an...

CVE-2023-29731

SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an...

Loka Digital Media SoLive 安全漏洞

Loka Digital Media SoLive is a social platform from Loka Digital Media, Inc. A security vulnerability exists in Loka Digital Media SoLive versions 1.6.14 through 1.6.20 that originates from an attacker being able to modify data in any SharedPreference file that is loaded into memory when the...

PT-2023-22382 · Solive · Solive

Name of the Vulnerable Software and Affected Versions: SoLive versions 1.6.14 through 1.6.20 Description: The issue allows an attacker to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. This can cause the application t...

AndroidRock Call Blocker 安全漏洞

AndroidRock Call Blocker is an application from AndroidRock Inc. It can automatically reject unwanted calls. A security vulnerability exists in AndroidRock Call Blocker version 6.6.3, which originates from the fact that an attacker can use the key component to inject a large amount of dirty data...

PT-2023-22378 · Unknown · Call Blocker

Name of the Vulnerable Software and Affected Versions: Call Blocker application version 6.6.3 Description: The issue allows an attacker to inject large amounts of data into the application's database, causing it to crash due to an out-of-memory OOM error when it loads the data into memory on...

The vulnerability of the ComponentManager.StartupCultureSettings component of the CODESYS Development System application programming framework allows a attacker to execute arbitrary commands.

The vulnerability of the ComponentManager.StartupCultureSettings component in the CODESYS Development System application development framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

[SECURITY] Fedora 37 Update: kitty-0.26.5-5.fc37

Offloads rendering to the GPU for lower system load and buttery smooth scrolling. Uses threaded rendering to minimize input latency. - Supports all modern terminal features: graphics images, unicode, true-col or, OpenType ligatures, mouse protocol, focus tracking, bracketed paste and several new...

[SECURITY] Fedora 38 Update: kitty-0.28.1-4.fc38

Offloads rendering to the GPU for lower system load and buttery smooth scrolling. Uses threaded rendering to minimize input latency. - Supports all modern terminal features: graphics images, unicode, true-col or, OpenType ligatures, mouse protocol, focus tracking, bracketed paste and several new...

The vulnerability of the php_cli_server_startup_workers function (sapi/cli/php_cli_server.c) in the PHP programming language allows a attacker to trigger a service failure.

The vulnerability of the phpcliserverstartupworkers function sapi/cli/phpcliserver.c in the PHP interpreter is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

3s-smart Software Solutions CODESYS Development System 加密问题漏洞

3s-smart Software Solutions CODESYS Development System is a suite of programming tools for use in the field of industrial controllers and automation technology from 3s-smart Software Solutions GmbH 3s-smart Software Solutions of Germany. The 3s-smart Software Solutions CODESYS Development System...

Workspace app timeout when launching desktop VDI which is in powered off state

VDA is in powered Off state on the hypervisor. User clicks on the desktop icon and machine starts on hypervisor due to powerOnlaunch request and registers but the launch fails with the below error : Citrix Workspace : Could not start appThere was a problem contacting "XXX"...