‼ CVE-2023-30697 ‼
📖 Read
via "National Vulnerability Database".
An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30689 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30682 ‼
📖 Read
via "National Vulnerability Database".
Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call silenceRinger API without permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30685 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local attakcers to change TTY mode.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30699 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30683 ‼
📖 Read
via "National Vulnerability Database".
Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30701 ‼
📖 Read
via "National Vulnerability Database".
PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30684 ‼
📖 Read
via "National Vulnerability Database".
Improper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call acceptRingingCall API without permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30693 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30705 ‼
📖 Read
via "National Vulnerability Database".
Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30702 ‼
📖 Read
via "National Vulnerability Database".
Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30696 ‼
📖 Read
via "National Vulnerability Database".
An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30686 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30703 ‼
📖 Read
via "National Vulnerability Database".
Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30687 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30681 ‼
📖 Read
via "National Vulnerability Database".
An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30691 ‼
📖 Read
via "National Vulnerability Database".
Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30700 ‼
📖 Read
via "National Vulnerability Database".
PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider without proper permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30688 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
🦿 Quick Glossary: Cybersecurity Attack Response and Mitigation 🦿
📖 Read
via "Tech Republic".
Your computer network is under constant attack. The hard reality is that one of those cyberattacks will succeed, and you had better be prepared. This quick glossary from TechRepublic Premium explains the terminology used by security experts as they attempt to reduce the damage caused by a successful attack. From the glossary: EVIDENCE COLLECTION POLICY ...📖 Read
via "Tech Republic".
TechRepublic
Quick Glossary: Cybersecurity Attack Response and Mitigation | TechRepublic
Your computer network is under constant attack. The hard reality is that one of those cyberattacks will succeed, and you had better be prepared. This
🕴 'MoustachedBouncer' APT Spies on Embassies, Likely via ISPs 🕴
📖 Read
via "Dark Reading".
Diplomats who didn't use VPNs may have lost sensitive state information to a Belarusian threat actor that wields the "Disco" and "Nightclub" malware.📖 Read
via "Dark Reading".
Dark Reading
'MoustachedBouncer' APT Spies on Embassies, Likely via ISPs
Diplomats who didn't use VPNs may have lost sensitive state information to a Belarusian government-aligned threat actor, which wields the "Disco" and "Nightclub" malware.