CVE-2026-26214 Xiaomi Galaxy FDS Android SDK <= 3.0.8 TLS Hostname Verification Disabled Enables MITM

Galaxy FDS Android SDK XiaoMi/galaxy-fds-sdk-android version 3.0.8 and prior disable TLS hostname verification when HTTPS is enabled the default configuration. In GalaxyFDSClientImpl.createHttpClient, the SDK configures Apache HttpClient with SSLSocketFactory.ALLOWALLHOSTNAMEVERIFIER, which accep...

HP App – Potential Cross-Site Scripting

HP App for Android is potentially vulnerable to cross-site scripting XSS when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities. Update your application...

PT-2026-7854

Name of the Vulnerable Software and Affected Versions Galaxy FDS Android SDK XiaoMi/galaxy-fds-sdk-android versions prior to 3.0.9 Description The Galaxy FDS Android SDK disables TLS hostname verification when HTTPS is enabled by default. Specifically, the createHttpClient function within the...

CVE-2026-26214: Improper Validation of Certificate with Host Mismatch

Galaxy FDS Android SDK XiaoMi/galaxy-fds-sdk-android version 3.0.8 and prior disable TLS hostname verification when HTTPS is enabled the default configuration. In GalaxyFDSClientImpl.createHttpClient, the SDK configures Apache HttpClient with SSLSocketFactory.ALLOWALLHOSTNAMEVERIFIER, which accep...

galaxy-fds-sdk-android 安全漏洞

Galaxy-FDS-SDK-Android is an open-source developer toolkit developed by Xiaomi for storing file data on Xiaomi devices. Versions of Galaxy-FDS-SDK-Android 3.0.8 and earlier contain security vulnerabilities. These vulnerabilities stem from the disabling of TLS hostname verification when HTTPS is...

cap-go/capacitor-native-biometric Authentication Bypass

There is a potential issue with the cap-go/capacitor-native-biometric library. --- Summary The cap-go/capacitor-native-biometric library was found to be subject to an authentication bypass as the current implementation of the onAuthenticationSucceeded does not appear to handle a...

PT-2026-31520

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A flaw exists in the Media component of Google Chrome on Android. This issue involves synchronization errors when using a shared resource. Successful exploitation could allow a remote...

Empirical Evaluation of SMOTE in Android Malware Detection with Machine Learning: Challenges and Performance in CICMalDroid 2020

Malware, malicious software designed to damage computer systems and perpetrate scams, is proliferating at an alarming rate, with thousands of new threats emerging daily. Android devices, prevalent in smartphones, smartwatches, tablets, and IoTs, represent a vast attack surface, making malware...

📄 Samsung Quram DNG Remote Code Execution

A vulnerability exists in Samsung's image decoding library libimagecodec.quram.so responsible for parsing Digital Negatives DNG. A malformed DNG containing oversized IFD entries can cause heap corruption. With precise heap grooming, this condition may lead to remote code execution when the...

The vulnerability of the x86_android_tabletremove() function in the drivers/platform/x86/x86-android-tablets/core.c driver, which is part of the Linux kernel support for X86 devices. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the x86androidtabletremove function in the drivers/platform/x86/x86-android-tablets/core.c driver for supporting Linux kernel devices is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

atool

ATOOL - Android Static Analysis & Exploit Scanner v1.0 !Pyth...

CVE-2026-0391

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-5519

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-0391

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-0391

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-0391

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-0391

CVE-2026-0391 describes a user-interface misrepresentation in Microsoft Edge (Chromium-based) for Android that could allow an attacker to spoof information over a network. The vulnerability affects Microsoft Edge for Android, with the issue framed as a UI spoofing flaw rather than a network-explo...

CVE-2026-0391 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-0391 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...