CVE-2026-21059

Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...

CVE-2026-21059

Samsung Contacts (prior to SMR Aug-2026 Release 1) improperly exports Android application components, allowing local attackers with low privileges to delete files under the app's elevated privileges. CISA SSVC marks exploitation as "none"; no exploit code is known. Apply the SMR Aug-2026 Release ...

EUVD-2026-55084

Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...

CVE-2026-21058

Improper input validation in Samsung Contacts (pre-SMR Aug-2026 Release 1) lets local attackers delete files using the app's privileges. NVD rates it HIGH (CVSS 7.1, local/low-complexity), while Samsung rates it MEDIUM (6.9). No in-the-wild exploitation is reported. Apply the SMR Aug-2026 Release...

A week in security (August 3 – August 9)

Last week on Malwarebytes Labs: AI chat bots are sliding into League of Legends friend requests Meta ordered to pay $942 million over harm to children Apple WebKit vulnerabilities reveal your IP address, despite Private Relay Scammers target OnlyFans users with deepfakes Amazon and Apple...

firezone gui-client-1.5.16

Secure remote access that's 3x faster than OpenVPN with zero-trust, peer-to-peer connections Docs | Quickstart | Download Clients | Discussions | Support Overview Firezone is an open source platform to securely manage remote access for any-sized organization. Unlike most VPNs, Firezone takes a...

Exploit for CVE-2020-23349

CVE-2020-23349 Android Lab Sina Weibo Android SDK 4.2.7의 Inte...

PT-2026-69385

Name of the Vulnerable Software and Affected Versions Samsung Contacts versions prior to SMR Aug-2026 Release 1 Description Improper export of Android application components allows local attackers to delete files using the privileges of Samsung Contacts. Recommendations Update Samsung Contacts to...

Linux Distros Unpatched Vulnerability : CVE-2026-71392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android is vulnerable to an integer overflow in the sfntreadcmapformat12 function in src/sfnt.c. When processing a crafted TrueType font file, an...

PT-2026-69391

Name of the Vulnerable Software and Affected Versions AppLock versions prior to SMR Aug-2026 Release 1 Description Improper export of android application components allows physical attackers to bypass the app lock function. Recommendations Update to SMR Aug-2026 Release 1...

The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices is related to the improper use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-71391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared- coordinate index boundary check in sfntvarysimpleglyph an...

Linux Distros Unpatched Vulnerability : CVE-2026-71394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android improperly validates the table header input in sfntreadtabledirectory in src/sfnt.c. Due to an incorrect comparison variable in the...

Linux Distros Unpatched Vulnerability : CVE-2026-71393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length...

HydraDragonAntivirus openedr-demo

Hydra Dragon Antivirus 📚 For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. WARNING: ACTIVE DEVELOPMENT IN PROGRESS This project is not production-ready. Breaking changes, bugs, and incomplete features should be expected. ⚠️ NOTICE: This repository is...

MeshCore room-server-v1.17.0

About MeshCore MeshCore is a lightweight, portable C++ library that enables multi-hop packet routing for embedded projects using LoRa and other packet radios. It is designed for developers who want to create resilient, decentralized communication networks that work without the internet. 🔍 What is...

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection

The rise of autonomous AI agents represents a major paradigm shift in how users interact with mobile devices. Frameworks such as MobileRun and Mobile-Use can autonomously navigate Android applications and execute complex multi-step tasks. To interpret user interfaces, these frameworks rely...

bramble v1.14.3-chromium

Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...

cve-2026-43499 — Updated!

GhostLock Exploitation Failure Summary on PD2229 SM8475, 5.10.233 GKI I. Vulnerability and Device Facts 1.1 CVE-2026-43499 GhostLock Basic Information Item| Value ---|--- Vulnerability Type| Stack Use-After-Free in the rtmutex / futex PI path Introduced Version| Linux 2.6.39-rc1 May 2011, commit...