10180 matches found
CVE-2022-20281
In Core, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...
CVE-2022-20263
In ActivityManager, there is a way to read process state for other users due to a missing permission check. This could lead to local information disclosure of app usage with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Andro...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android 13 suffers from a security vulnerability that stems from a lack of permission checking in AppWidgets, which could potentially allow an activity to be launched from the background,...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android 13, which stems from a possible method to determine if an application is installed without querying permissions due to side-channel information leakage ...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android 13 suffers from a security vulnerability that stems from a lack of permission checking in Core, which could potentially allow an activity to be launched from the background, which...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates from the disclosure of installed packets due to a lack of permission checking in ActivityManager. An attacker can exploit this vulnerabilit...
CVE-2022-20282
In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Androi...
CVE-2022-20246
In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
What the Zola Hack Can Teach Us About Password Security
Password security is only as strong as the password itself. Unfortunately, we are often reminded of the danger of weak, reused, and compromised passwords with major cybersecurity breaches that start with stolen credentials. For example, in May 2022, the popular wedding planning site, Zola, was th...
PT-2022-14511 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In Connectivity, there is a possible bypass of the restriction of starting activity from background due to a logic error in the code. This could lead to local escalation of privilege with User executio...
PT-2022-14468 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege...
PT-2022-14540 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in ActivityManager, which could lead to the disclosure of installed packages. This results in local information disclosure without requiring additiona...
CVE-2022-34713
creationtimestamp| type| source ---|---|--- 2022-08-09 23:04:14+00:00| exploited| https://t.me/ctinow/57216 2022-08-10 00:30:56+00:00| seen| https://t.me/cibsecurity/47814 2022-08-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=850 2022-08-10 12:05:04+00:00| seen|...
Virtual Currency Platform ‘Tornado Cash’ Accused of Aiding APTs
The U.S. government has slapped sanctions on virtual currency mixer Tornado Cash for laundering more than $7 billion in crypto cash derived from cybercriminal activity. At least $455 million of that was moved for state-sponsored Lazarus Group in part to help fund North Korea’s missile program,...
CVE-2022-29071
creationtimestamp| type| source ---|---|--- 2022-08-05 20:20:54+00:00| seen| https://t.me/cibsecurity/47630...
CVE-2022-33726
Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...
CVE-2022-33729
Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC address of the connected Bluetooth device...
CVE-2022-33726
Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...
