Sickcodes

The issue is related to missing permission checks, resulting in unauthorized access and manipulation in the KeyChainActivity Application. This allows an attacker to escalate privileges and manipulate KeyChain operations by sending a malicious Intent to KeyChainActivity. The vulnerability can be triggered through a malicious incoming intent.

The issue is related to improper access control, resulting in sensitive information exposure. A threat actor can access the "/files.md5" file on the client side of a Gurock TestRail application, disclosing a full list of application files and the corresponding file paths. These file paths can be tested, potentially leading to the disclosure of hardcoded credentials, API keys, or other sensitive data.

An information disclosure issue exists where logged warning messages include timestamps of connections to V2 onion domains in tor.log. This issue affects versions prior to 1.28.62, where the server connection time for all v2 tor domains is permanently logged to ~/.config/BraveSoftware/Brave-Browser/tor/data/tor.log.

The issue arises from an incorrect permission assignment during the installation script, allowing a local unprivileged attacker to execute arbitrary code as root. This occurs because the installation instructs setting the system environment file `/etc/environment` with world writable permissions (0777), enabling any local unprivileged user to write to `/etc/environment` and force all users, including root, to execute arbitrary code during the next login or reboot. Additionally, the entire home directory of the `twcloud` user at `/home/twcloud` is given world writable permissions, allowing any local unprivileged attacker to execute arbitrary code as `twcloud`.

A local unprivileged attacker, such as a malicious App, can read and write to the `/data/vendor/tcl`, `/data/vendor/upgrade`, and `/var/TerminalManager` directories within the TV file system. This allows an attacker, such as a malicious APK or local unprivileged user, to perform fake system upgrades by writing to the `/data/vendor/upgrade` folder.

A vulnerability in the TCL Android Smart TV series allows an attacker on the adjacent network to arbitrarily browse and download sensitive files over an insecure web server running on port 7989 that lists all files & directories. An unprivileged remote attacker on the adjacent network can download most system files, leading to serious critical information disclosure. Some TV models and/or firmware versions may expose the web server with the entire file system accessible on another port.

A vulnerability in the Private Internet Access (PIA) VPN Client for Linux allows remote attackers to bypass an intended VPN kill switch mechanism and read sensitive information via intercepting network traffic. This occurs when the kill switch is configured to block all inbound and outbound network traffic, but privileged applications can continue sending and receiving network traffic if `net.ipv4.ip forward` has been enabled in the system kernel parameters. For instance, a Docker container running on a host with the VPN turned off and the kill switch turned on can continue using the internet, potentially leaking the host IP.