TVS Motor TVS Connect Security Breach

TVS Motor TVS Connect is an application for TVS motorcycle owners from TVS Motor India. A security vulnerability exists in TVS Motor TVS Connect v4.6.0, IOS v5.0.0, which originates from insecure handling of RSA key pairs. An attacker could exploit the vulnerability to access sensitive informatio...

CVE-2024-33309

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sensitive information via an insecure API endpoint. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...

CVE-2024-33308

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...

CVE-2024-33308

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...

PT-2024-25199 · Tvs · Tvs Connect Ios +1

Name of the Vulnerable Software and Affected Versions: TVS Connet Android versions 4.5.1 TVS Connet iOS versions 5.0.0 Description: An issue in TVS Connet allows a remote attacker to obtain sensitive information via an insecure API endpoint. Recommendations: For TVS Connet Android version 4.5.1,...

CVE-2024-33309

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sensitive information via an insecure API endpoint. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...

PT-2024-25198 · Unknown · Tvs Connet

Name of the Vulnerable Software and Affected Versions: TVS Connet versions 4.5.1 through 4.5.1 TVS Connet version 5.0.0 Description: An issue in TVS Connet allows a remote attacker to escalate privileges via the Emergency Contact Feature. This issue is disputed as discussed in the...

CVE-2024-33308

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...

CVE-2024-33309

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sensitive information via an insecure API endpoint. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...

TVS Motor Connect Mobile Application 安全漏洞

TVS Motor Connect Mobile Application is an application by TVS Motor India to experience the products and services of TVS Motor Company. A security vulnerability exists in TVS Motor Connect Mobile Application Android v.4.5.1 and iOS v.5.0.0, which stems from a vulnerability that allows a remote...

CVE-2024-33308

CVE-2024-33308 affects TVS Connet for Android v4.5.1 and iOS v5.0.0, enabling remote privilege escalation via the Emergency Contact Feature. Root cause and exact exploitation details are not provided across the sources, but multiple entries note the dispute around the vulnerability (CVE-Evidence ...

CVE-2024-33309

The CVE-2024-33309 issue affects TVS Connet on Android v4.5.1 and iOS v5.0.0, per multiple sources (Red Hat, NVD/CNNVD listing). The root cause is an insecure API endpoint that could allow a remote attacker to obtain sensitive information. Documents consistently describe vendor app TVS Connet as ...

tvs.co.jp Cross Site Scripting vulnerability OBB-3917526

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

LG webOS Security Vulnerability

LG webOS is a Linux kernel-based operating system for Smart TVs from the South Korean company LG. A security vulnerability exists in LG webOS. An attacker could exploit this vulnerability to execute arbitrary code...

Update now! Apple releases patch for zero-day vulnerability

Apple has released new security updates for several products, including a patch for a zero-day vulnerability that could impact iPhones, iPad, Macs, and Apple TVs. Apple says it’s aware of a report that the bug may have been exploited already. Further details about the nature of the vulnerability...

tvs-schwartz.com Cross Site Scripting vulnerability OBB-3797695

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

This Cybercrime Syndicate Pre-Infected Over 8.9 Million Android Phones Worldwide

A cybercrime enterprise known as Lemon Group is leveraging millions of pre-infected Android smartphones worldwide to carry out their malicious operations, posing significant supply chain risks. "The infection turns these devices into mobile proxies, tools for stealing and selling SMS messages,...

PT-2022-19698 · Consoletvs · Consoletvs Noxen

Name of the Vulnerable Software and Affected Versions: ConsoleTVs Noxen affected versions not specified Description: A problematic issue has been found in ConsoleTVs Noxen, affecting an unknown function of the file /Noxen-master/users.php. The manipulation of the create user username argument wit...

CVE-2022-23727

There is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting environments, local attacker is able to perform specific operation to exploit this vulnerability. Exploitation may cause the attacker to obtain a higher privilege...

Privilege escalation

There is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting environments, local attacker is able to perform specific operation to exploit this vulnerability. Exploitation may cause the attacker to obtain a higher privilege...