CVE-2023-42137

creationtimestamp| type| source ---|---|--- 2024-01-15 15:26:52+00:00| seen| https://t.me/ctinow/168404 2024-01-17 17:06:42+00:00| published-proof-of-concept| https://t.me/truesecator/5303 2024-01-18 15:27:35+00:00| seen| https://t.me/itsecnews/3996 2024-06-01 21:47:05+00:00| seen|...

CVE-2023-42137

PAX Android based POS devices with PayDroid8.1.0SagittariusV11.1.5020230614 or earlier can allow for command execution with high privileges by using malicious symlinks. The attacker must have shell access to the device in order to exploit this vulnerability...