10969 matches found
ASB-A-354682735
In InputMethodSubtypeArray of InputMethodSubtypeArray.java, there is a possible way to bypass a key intent check to launch arbitrary activity due to Parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
ASB-A-352542820
In onCreateOptionsMenu of UserSettings.java, there is a possible way to remove the work profile by opening a hidden activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
ASB-A-305695605
In multiple locations, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-13112
creationtimestamp| type| source ---|---|--- 2025-01-31 06:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwy327l2b 2025-01-31 06:19:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113921514093808163 2025-01-31 07:24:20+00:00| seen|...
Malicious code in unitedrabbits (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in prajwal_kewat-test-package (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in tittottit (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in skulldentist (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in testingthesand (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-733 Malicious code in finfonfon (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-713 Malicious code in overture2osmjs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4757db7655e3de9ca7fa7343ca0d8cd59c899c46454ca659ff07261b884f64db Any computer that has this package installed or running should be considered...
MAL-2025-727 Malicious code in @wongapl/offer-digest (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in jqtools-overlay (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-705 Malicious code in css-blocks-monorepo (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd8788a6de395289af00ce5d63b51a4609d89ea09f2bf3eb36af0e27234e0fb1 Any computer that has this package installed or running should be considered...
Malicious code in gitgotgottten (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in theme-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in launchpad-ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in educationpurpose (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...