127 matches found
Urbandroid Twilight 安全漏洞
Urbandroid Twilight is an app from Urbandroid Inc. It is used to provide healthy sleep. A security vulnerability exists in Urbandroid Twilight version v.13.3, which stems from an unauthorized application that causes privilege escalation by manipulating the SharedPreference file...
CVE-2023-29756
An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...
PT-2023-22402 · Twilight · Twilight
Name of the Vulnerable Software and Affected Versions: Twilight version 13.3 Description: The issue allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. This can lead to unauthorized access and control. Recommendations: For Twilight version...
CVE-2023-29755
An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...
CVE-2023-29755
An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...
CVE-2023-29756
An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...
CVE-2023-29755
The CVE-2023-29755 entry concerns Twilight v13.3 on Android. It describes a local privilege-escalation vulnerability where untrusted apps can manipulate the app’s SharedPreference files to gain privileges. Documented impact is high (CVE CVSS 3.1: Local attack, no privileges required, user interac...
Google TAG Warns of Russian Hackers Conducting Phishing Attacks in Ukraine
Elite hackers associated with Russia's military intelligence service have been linked to large-volume phishing campaigns aimed at hundreds of users in Ukraine to extract intelligence and influence public discourse related to the war. Google's Threat Analysis Group TAG, which is monitoring the...
Malicious code in twitch-twilight (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c40a9116385e152cb6c31599be4a1efd252851601f1b8c8dffe019fbe3fe01e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6706 Malicious code in twitch-twilight (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c40a9116385e152cb6c31599be4a1efd252851601f1b8c8dffe019fbe3fe01e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Twilight - Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Twilight published at the 'play' market has multiple vulnerabilities...
Twilight WebServer 1.3.3 .0 GET Request Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8181/info It has been reported that Twilight WebServer may be prone to a remote buffer overflow vulnerability. The problem may be present due to a lack of bounds checking performed on incoming GET requests. Arbitrary code...
GeekLog 1.7.0 (fckeditor) Arbitrary File Upload Vulnerability
No description provided by source. db 88 88 ,ad8888ba, d88b 88 88 d8' 8b d8'8b 88 88 d8' d8' 8b 88aaaaaaaa88 88 d8YaaaaY8b 8888 88 88888 d88b 88 88 Y8, 88 d8' 8b 88 88 Y8a. .a88 d8' 8b 88 88 Y88888P Exploit Title: Geeklog Date: 18-10-2010 Author: Kubanezi AHG Software Link: http://www.geeklog.net...
CVE-2013-4900
Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read arbitrary files via a ..%5c dot dot encoded backslash in a GET request...
CVE-2013-4899
Cross-site scripting XSS vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the gallery/ page...
Directory traversal
Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read arbitrary files via a ..%5c dot dot encoded backslash in a GET request...
Cross site scripting
Cross-site scripting XSS vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the gallery/ page...
CVE-2013-4900
CVE-2013-4900 describes a directory traversal in DeWeS Web Server (0.4.2 and possibly earlier), used with Twilight CMS, allowing remote attackers to read arbitrary files via a dot-dot-encoded backslash (e.g., ..%5c) in a GET request. Connected sources confirm the vulnerable component and the expl...
CVE-2013-4899
Cross-site scripting XSS vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the gallery/ page...
CVE-2013-4899
CVE-2013-4899 concerns Twilight CMS (v5.17 and earlier). The issue is an XSS vulnerability where user-supplied data appended to "/gallery/" is insufficiently filtered, allowing a remote attacker to inject arbitrary script via PATH_INFO and execute in the context of a logged-in user. The advisory ...