Large-scale Cyber Attack Hijacks East Asian Websites for Adult Content Redirects

A widespread malicious cyber operation has hijacked thousands of websites aimed at East Asian audiences to redirect visitors to adult-themed content since early September 2022. The ongoing campaign entails injecting malicious JavaScript code to the hacked websites, often connecting to the target...

APKHunt - Comprehensive Static Code Analysis Tool For Android Apps That Is Based On The OWASP MASVS Framework

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their cod...

Experts Warn of RambleOn Android Malware Targeting South Korean Journalists

Suspected North Korean nation-state actors targeted a journalist in South Korea with a malware-laced Android app as part of a social engineering campaign. The findings come from South Korea-based non-profit Interlab, which coined the new malware RambleOn. The malicious functionalities include the...

SUSE CVE-2022-1495

Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page...

cargo-crates (>=0.1.0, <=0.1.5), cargo-index-transit (0.1.1) +6 more potentially affected by CVE-2023-22742 via libgit2-sys (0.14.1+1.5.0)

libgit2-sys CARGO version 0.14.1+1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on libgit2-sys and may be impacted: - cargo-crates =0.1.0, =0.1.0, =2.1.8, =2.7.0, =0.6.0, =0.6.2 Source cves: CVE-2023-22742 Source advisory: OSV:RUSTSEC-2023-0003...

CVE-2022-36442

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK...

Code injection

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK...

CVE-2022-36442

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK...

CVE-2022-36442

CVE-2022-36442 affects Zebra Enterprise Home Screen 4.1.19. The issue arises from the embedded Google Chrome component, enabling installation of unauthorized applications via a downloaded APK. Root cause: abuse of the embedded Chrome within the Zebra app to install software without authorization....

PT-2023-13494 · Zebra +1 · Zebra Enterprise Home Screen +1

Name of the Vulnerable Software and Affected Versions: Zebra Enterprise Home Screen version 4.1.19 Description: An issue was discovered in the software, allowing the installation of unauthorized applications via a downloaded APK by utilizing the embedded Google Chrome application. Recommendations...

BitKeep Confirms Cyber Attack, Loses Over $9 Million in Digital Currencies

Decentralized multi-chain crypto wallet BitKeep on Wednesday confirmed a cyber attack that allowed threat actors to distribute fraudulent versions of its Android app with the goal of stealing users' digital currencies. "With maliciously implanted code, the altered APK led to the leak of user's...

CVE-2022-36938

DexLoader function getstringidxfromdex in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file...

Remote code execution

DexLoader function getstringidxfromdex in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file...

CVE-2022-36938

DexLoader function getstringidxfromdex in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file...

CVE-2022-36938

DexLoader function getstringidxfromdex in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file...

CVE-2022-36938

CVE-2022-36938 affects Meta ReDex (Redex): the DexLoader function get_stringidx_fromdex() can load an out-of-bounds address while loading the string index table in Redex builds before commit 3b44c64, potentially enabling remote code execution when processing third-party Android APKs. The availabl...

CVE-2022-36938

DexLoader function getstringidxfromdex in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file...

CVE-2020-4099 HCL Verse for Android is susceptible to an APK signing key check vulnerability

The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app...

Design/Logic Flaw

jadx is a set of command line and GUI tools for producing Java source code from Android Dex and Apk files. versions prior to 1.4.5 are subject to a Denial of Service when opening zip files with HTML sequences. This issue has been patched in version 1.4.5. There are no known workarounds...

CVE-2022-39259

The CVE refers to Skylot Jadx (Jadx-gui) prior to version 1.4.5, where opening a ZIP containing an HTML sequence can trigger a Denial of Service in the Swing HTML rendering. The underlying issue is a GUI-side DoS vulnerability in Jadx-gui’s HTML rendering path. The vulnerability is patched in ver...