CVE-2025-26450

In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...

CVE-2025-26450

creationtimestamp| type| source ---|---|--- 2025-09-04 17:26:06+00:00| seen| Telegram/Mnmg0Q7-YBYrNpfcny9B6KyKifoBE6HVymaPrHa3Fhgghm4...

CVE-2023-26450

The "OX Count" web service did not specify a media-type when processing responses by external resources. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker...

CVE-2022-26450

In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07177801; Issue ID: ALPS07177801...

CVE-2024-26450

creationtimestamp| type| source ---|---|--- 2024-02-28 23:27:07+00:00| seen| https://t.me/ctinow/195976...

CVE-2024-26450

CVE-2024-26450 affects Piwigo versions prior to 14.2.0. The vulnerability chains a Cross-Site Request Forgery to trigger a Stored XSS payload in an Admin dashboard, enabling remote JavaScript execution and the upload of a PHP file under an administrator profile, which can be used to connect back ...

CVE-2023-26450

creationtimestamp| type| source ---|---|--- 2023-08-02 16:39:15+00:00| seen| https://t.me/cibsecurity/67577...

CVE-2023-26450

Open-Xchange CVE-2023-26450 affects the OX Count web service in Open-Xchange AppSuite. The root cause is that the OX Count service did not specify a media-type when processing responses from external resources, enabling malicious script code to execute in the victim’s context and potentially lead...

CVE-2022-26450

creationtimestamp| type| source ---|---|--- 2022-09-06 22:19:29+00:00| seen| https://t.me/cibsecurity/49355...

CVE-2022-26450

CVE-2022-26450 affects MediaTek Apusys. The vulnerability is a use-after-free caused by a race condition in apusys that can lead to local escalation of privileges with System execution privileges required; exploitation does not require user interaction. The issue is documented across multiple sou...