CVE-2022-1495

Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page...

CVE-2022-1495

Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page...

CVE-2022-1495

Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page...

CVE-2022-1495

CVE-2022-1495 affects Google Chrome on Android (prior to 101.0.4951.41). Root cause: Incorrect security UI in the Downloads dialog could allow a remote attacker to spoof the APK downloads dialog via crafted HTML. Impact described as spoofing the downloads prompt; no exploitation details provided ...

CVE-2022-1495: Authentication Bypass by Spoofing

Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page...

Roaming Mantis Financial Hackers Targeting Android and iPhone Users in France

The mobile threat campaign tracked as Roaming Mantis has been linked to a new wave of compromises directed against French mobile phone users, months after it expanded its targeting to include European countries. No fewer than 70,000 Android devices are said to have been infected as part of the...

CVE-2022-28878

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine...

CVE-2022-28878

CVE-2022-28878 describes a Denial-of-Service in F-Secure Atlant and some WithSecure products where scanning fuzzed APK files can crash the scanning engine. Public details in the initial document indicate impact to availability but do not specify affected versions, exact vulnerable components, roo...

CVE-2022-28878 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine...

PT-2022-19282

Name of the Vulnerable Software and Affected Versions F-Secure Atlant affected versions not specified WithSecure products affected versions not specified Description A Denial-of-Service issue was found in F-Secure Atlant and certain WithSecure products. The issue occurs when scanning a fuzzed APK...

CVE-2022-28878: Undefined Security Weakness

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine...

GlassWire: Facebook App API credentials leaked in the APK

Facebook App API credentials were leaked in the GlassWire version 1,1,26,0b F1827380 APK file, including the App ID and App Secret. This could allow an attacker to modify Facebook App settings using the leaked token...

MAL-2022-3158 Malicious code in free-fortnite-skins-genrator-apk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45a71445ed3a1bf59289d5d880a88cc8110ef86e663311b6a6c945648ef8bb47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cashapp-hakc-apk-app-donwload-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04eadcab52b9bac905ca7c27c7cd573703c8ca31b52ed9001fb658461021ad7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3129 Malicious code in free-cashapp-money-hakc-apk-donwload-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e882b594c41385c88a7c2afbfba23801a539bd8123c9123f0e3ed68681c53b87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1840 Malicious code in cashapp-hakc-apk-app-donwload-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04eadcab52b9bac905ca7c27c7cd573703c8ca31b52ed9001fb658461021ad7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-35116

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APKs data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

Code injection

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APKs data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35116

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APKs data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35116

The CVE-2021-35116 issue affects Qualcomm Snapdragon devices (Auto/Compute/Connectivity/Consumer IOT/Industrial IOT/Mobile/Wearables) and is triggered when an APK loads a crafted model into the CDSP, potentially compromising the CDSP and other APKs’ data executing there. This is the stated impact...