Aggregator

Submit #705587 / VDB-336413

Submit #707178 / VDB-336412

Submit #705527 / VDB-287676

海莲花APT组织攻击样本分析

A vulnerability identified as critical has been detected in Tenda AC20 16.03.08.12. The impacted element is the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd. Performing manipulation of the argument rebootTime results in stack-based buffer overflow. This vulnerability is reported as CVE-2025-14655. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability labeled as critical has been found in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedWifi. Executing manipulation of the argument schedStartTime/schedEndTime can lead to buffer overflow. This vulnerability appears as CVE-2025-14656. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability labeled as critical has been found in Facemoji Emoji Keyboard 2.9.1.2 on Android. This affects an unknown part. Executing manipulation can lead to improper authorization. This vulnerability appears as CVE-2023-29752. The attack requires local access. There is no available exploit.

A vulnerability marked as critical has been reported in Twilight 13.3 on Android. This vulnerability affects unknown code of the component SharedPreference File Handler. The manipulation leads to improper authorization. This vulnerability is traded as CVE-2023-29755. An attack has to be approached locally. There is no exploit available.

A vulnerability described as problematic has been identified in Twilight 13.3 on Android. This issue affects some unknown processing of the component SharedPreference File Handler. The manipulation results in denial of service. This vulnerability is known as CVE-2023-29756. Attacking locally is a requirement. No exploit is available.

A vulnerability classified as critical has been found in Blue Light Filter 1.5.5 on Android. Impacted is an unknown function of the component SharedPreference File Handler. This manipulation causes improper authorization. This vulnerability is handled as CVE-2023-29757. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability labeled as problematic has been found in Facemoji Emoji Keyboard 2.9.1.2 on Android. Impacted is an unknown function of the component SharedPreference File Handler. The manipulation results in denial of service. This vulnerability is reported as CVE-2023-29753. The attack requires a local approach. No exploit exists.

A vulnerability was found in Story Saver for Instragram App 1.0.6 on Android and classified as problematic. Affected is an unknown function of the component SharedPreference File Handler. Executing manipulation can lead to denial of service. This vulnerability is handled as CVE-2023-29748. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability was found in Yandex Navigator 6.60 on Android. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component SharedPreference File Handler. This manipulation causes denial of service. This vulnerability is tracked as CVE-2023-29751. The attack is restricted to local execution. No exploit exists.

A vulnerability identified as critical has been detected in Yandex Navigator 6.60 on Android. Affected by this issue is some unknown functionality of the component SharedPreference File Handler. Performing manipulation results in improper authorization. This vulnerability is reported as CVE-2023-29749. The attack requires a local approach. No exploit exists.

关键词无人机今年10月中旬，虹口公安分局网安部门在市公安局网安总队指导下巡查发现，某网购平台一家主营无人机配件

关键词个人信息在任职派出所民警期间，黄某某使用自己或其他民警的密钥登录全国公安交通管理综合应用平台查询车辆信息

关键词漏洞动动手指，篡改几行代码，原价59元的汉堡套餐就能“0元购”，然后再转卖牟利。这看似一笔不错的买卖，实则是违法的行为。

A vulnerability was found in Ugreen DH2100+ up to 5.3.0 and classified as critical. This affects an unknown function of the component USB Handler. Such manipulation leads to symlink following. This vulnerability is referenced as CVE-2025-14693. The attack can be executed directly on the physical device. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Департамент транспорта рекламирует сайты для взрослых. А что такого?

Submit #705035 / VDB-311659