10122 matches found
Design/Logic Flaw
In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
Code injection
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-35674
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-35674
The CVE-2023-35674 issue affects the Android Framework, specifically an onCreate path in WindowState.java that can launch a background activity due to a logic error. This enables local elevation of privilege without extra execution privileges and without user interaction. The Android Security Bul...
MAL-2023-8064 Malicious code in @get-bridge/bridge-string-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e69ac01e87147a835e5ab4045ff640d7fa9d2eb636aeb12eef6e1fc1577d021f The OpenSSF Package Analysis project identified '@get-bridge/bridge-string-utils' @ 99.99.99 npm as malicious. It is considered malicious becaus...
MAL-2023-8063 Malicious code in npm-random-gen (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e52ede67a495176f0c0e0501c905f88aca3d270ae33cea9490c1f1dfe9bcef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-35674
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Recent assessments: Assessed...
PT-2023-25261 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an unsafe PendingIntent in the createQuickShareAction of SaveImageInBackgroundTask.java. This could lead to a background activit...
PT-2023-28361 · Unknown · Wave.Ai.Browser
Name of the Vulnerable Software and Affected Versions: wave.ai.browser application through 1.0.35 for Android Description: The issue allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. It contains a manifest entry that exports the...
PT-2023-27231 · Google · Android
Name of the Vulnerable Software and Affected Versions: MyCrops HiGrade "THC Testing & Cannabi" application version 1.0.337 Description: An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application for Android, where a remote attacker can start the camera feed via the...
CISA, FBI, and CNMF Release Advisory on Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475
Today, CISA, Federal Bureau of Investigation FBI, and U.S. Cyber Command’s Cyber National Mission Force CNMF published a joint Cybersecurity Advisory CSA, Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475. This CSA provides information on an incident at an Aeronautical...
CVE-2023-40531
creationtimestamp| type| source ---|---|--- 2023-09-06 14:17:50+00:00| seen| https://t.me/cibsecurity/69986...
CVE-2023-30712
Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity...
CVE-2023-30712
Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity...
Input validation
Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity...
CVE-2023-30712
Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity...
CVE-2023-30712
Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity...
WordPress Activity Log Plugin < 2.8.8 is vulnerable to Bypass Vulnerability
Software Activity Log Type Plugin Vulnerable versions 2.8.8 Fixed in 2.8.8 OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-4281 Patch priority Low CVSS severity Low 5.3 Developer Elementor PSID 7011dff59d10 Credits Bartlomiej Marek and Tomasz Swiadek...
CVE-2023-28544
creationtimestamp| type| source ---|---|--- 2023-09-05 12:22:56+00:00| seen| https://t.me/cibsecurity/69845...
PT-2023-22913 · Unknown · Settings Suggestions
Name of the Vulnerable Software and Affected Versions: Settings Suggestions versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper input validation, which allows attackers to launch arbitrary activity. Recommendations: For versions prior to SMR Sep-2023 Release 1,...