PT-2026-57448

In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...

PT-2026-57457

In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57469

In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-28590

A Remote Code Execution RCE vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=installtheme...

Adobe Media Encoder < 15.4 Multiple Vulnerabilities (APSB21-43) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 15.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-43 advisory. - Adobe Media Encoder version 15.2 and earlier is affected by a memory corruption vulnerability when parsing a...

Pixelimity Arbitrary File Upload (CVE-2022-28590)

An arbitrary file upload vulnerability exists in Pixelimity. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Exploit for CVE-2022-28590

CVE-2022-28590 The original discovery and manual PoC is from...

CVE-2022-28590

creationtimestamp| type| source ---|---|--- 2022-05-03 18:28:50+00:00| seen| https://t.me/cibsecurity/41815 2022-05-10 13:27:31+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5974...

CVE-2022-28590

CVE-2022-28590 affects Pixelimity 1.0. The vulnerability enables remote code execution via admin/admin-ajax.php?action=install_theme. Multiple sources describe an arbitrary file upload path that can lead to code execution, with public PoC showing webshell upload to facilitate further access. The ...

CVE-2021-28590

Adobe Media Encoder version 15.2 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-28590

Adobe Media Encoder (version 15.2 and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a malicious file). Multiple connected source...

CVE-2021-28590 Adobe Media Encoder VOB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Media Encoder version 15.2 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2020-28590

The CVE-2020-28590 entry concerns an out-of-bounds read in the Obj File TriangleMesh::TriangleMesh() function of libslic3r (Slic3r) version 1.3.0 and Master Commit 92abbc42. A specially crafted OBJ file could trigger information disclosure. The vulnerability originates from the TriangleMesh() imp...

CVE-2020-28590

An out-of-bounds read vulnerability exists in the Obj File TriangleMesh::TriangleMesh functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted obj file could lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability...