PT-2023-20684 · Unknown · Lorawan-Stack

Name of the Vulnerable Software and Affected Versions: lorawan-stack versions prior to 3.24.1 Description: The issue is related to an open redirect on the login page of the lorawan-stack server, allowing an attacker to supply a user-controlled redirect upon sign in. This may enable malicious acto...

SUSE CVE-2023-28646

Nextcloud android is an android app for interfacing with the nextcloud home server ecosystem. In versions from 3.7.0 and before 3.24.1 an attacker that has access to the unlocked physical device can bypass the Nextcloud Android Pin/passcode protection via a thirdparty app. This allows to see meta...