In multiple functions of StorageManagerService.java and UserManagerService.java, there is a possible way to leave user's directories unencrypted due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224585613
In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-219015884
In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-205571133
In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-228078096
A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Футболка классическая — цвет: ОРАНЖЕВЫЙ, пол: ЖЕН. Новогодние птички радуются зимним праздникам. Они катаются с горки, на коньках, получают подарки и пьют чай. Printio Футболка классическая Новогодние птички Размер S INT Цвет оранжевый в наличиивозможна доставка. Цена: 1190.00 ₽ КУПИТЬ
Футболка Wearcraft Premium — цвет: БЕЛЫЙ, пол: ЖЕН. Маленький значок с закатом на море для тех, кто мечтает выбраться из рутины! Printio Футболка Wearcraft Premium Закат Размер XS INT Цвет белый в наличиивозможна доставка. Цена: 990.00 ₽ КУПИТЬ
Футболка классическая — цвет: БЕЛЫЙ, пол: ЖЕН. Моя косметичка- футболка с принтом для красивых девушек! Будет отличным подарком на любой праздник. Также подойдет для мастеров бьюти сферы. Printio Футболка классическая Моя косметичка Размер S INT Цвет белый в наличиивозможна доставка. Цена: 990.00 ₽ КУПИТЬ