PT-2022-18631

Name of the Vulnerable Software and Affected Versions Smart Switch PC versions prior to 4.2.22022 4 Description A DLL hijacking issue allows an attacker to execute arbitrary code. Recommendations For versions prior to 4.2.22022 4, update to version 4.2.22022 4 or later to resolve the issue...

Samsung Smart Switch PC code issue and vulnerabilities

Samsung Smart Switch PC is a Windows software from Samsung, a South Korean company, used for data transfer. A security vulnerability exists in previous versions of Samsung Smart Switch PC 4.2.220224, which can be exploited by attackers to execute arbitrary code...

CVE-2022-27842: Improper Input Validation

DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.220224 allows attacker to execute abitrary code...

Digital China Networks S4600-10P-SI: Operating System Command Injection Vulnerability

The Digital China Networks S4600-10P-SI is a switch from Digital China Networks Beijing Co. A security vulnerability exists in DCN Digital China Networks S4600-10P-SI versions prior to R0241.0470, which stems from incorrect validation of parameters in the console interface. An authenticated,...

Rockwell Automation Logix Controllers

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Logix Controllers Vulnerability: Inclusion of Functionality from Untrusted Control Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...

CVE-2021-39772

In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-11050

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to a missing permission check in Bluetooth, allowing access to the a2dp audio control switch. This could lead to local escalation of privilege without requiring...

CVE-2021-39772: Improper Privilege Management

In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

WordPress Curtain plugin <= 1.0.1 - Unauthenticated Maintenance Mode Switch vulnerability

Unauthenticated Maintenance Mode Switch vulnerability discovered by Hassan Khan Yusufzai Splint3r7 in WordPress Curtain plugin versions = 1.0.1. Solution Update the WordPress Curtain plugin to the latest available version at least 1.0.2...

CVE-2021-28505

On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol...

License forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, (CVE-2021-27795)

Security Advisory ID : BSA-2022-1758 Component : Brocade Fabric OS License Revision : 2.0 Brocade Fabric OS FOS hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of...

A new rootkit comes to an ATM near you

Its not unusual to hear about malware created to affect automated teller machines ATMs. Malware can be planted at the ATMs PC or its network, or attackers could launch a Man-in-the-Middle MiTM attack. Recently, a new rootkit, which the Mandiant Advanced Practices team have named CAKETAP, was foun...

Apple macOS Big Sur and Apple macOS Monterey authorization issue vulnerabilities

Apple macOS Big Sur and Apple macOS Monterey are both products of Apple Inc.Apple macOS Big Sur is a mobile application app.Apple macOS Monterey is the 18th major version of macOS, the operating system for the Macintosh desktop. An authorization issue vulnerability exists in Apple macOS Big Sur a...

CVE-2022-25816: Improper Authentication

Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication...

Fedora: Security Advisory for barrier (FEDORA-2022-09c1a5bab8)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: barrier-2.4.0-1.fc35

Barrier is software that mimics the functionality of a KVM switch, which historically would allow you to use a single keyboard and mouse to control multiple computers. Barrier does this in software, allowing you to tell it which machine to control by moving your mouse to the edge of the screen, o...

[SECURITY] Fedora 34 Update: barrier-2.4.0-1.fc34

Barrier is software that mimics the functionality of a KVM switch, which historically would allow you to use a single keyboard and mouse to control multiple computers. Barrier does this in software, allowing you to tell it which machine to control by moving your mouse to the edge of the screen, o...

CVE-2021-41003

Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series...

CVE-2021-41003

Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series...

CVE-2021-41000

Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch...