CVE-2022-24886 Exposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.client

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.19.0, any application with notification permission can access contacts if Nextcloud has access to Contacts without applying for the Contacts permission itself. Version 3.19.0...

CVE-2022-24886

Summary of CVE-2022-24886 (Nextcloud Android app) The issue affects Nextcloud Android app versions prior to 3.19.0 where any app with notification permission can access contacts if Nextcloud has contact access, without requesting the Contacts permission itself. Root cause: a vulnerability in the ...

CVE-2022-24886 Exposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.client

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.19.0, any application with notification permission can access contacts if Nextcloud has access to Contacts without applying for the Contacts permission itself. Version 3.19.0...

Notification implicit PendingIntent in com.nextcloud.client allows to access contacts

None...

PT-2022-16956

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.19.0 Description The issue allows any application with notification permission to access contacts if Nextcloud has access to Contacts, without the application needing to apply for the Contacts permissi...

Nextcloud Android app 信息泄露漏洞

Nextcloud Android app is an Android-based mobile application for accessing Nextcloud servers from the German company Nextcloud. nextcloud Android app versions prior to 3.19.0 are vulnerable to an information disclosure vulnerability that stems from insufficient privilege restrictions. An attacker...

Motorola Android App Vulnerabilities - Lenovo Support US

No description provided...

CVE-2021-45490

The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 lack SSL certificate validation...

WordPress Mobile App Editor – WordPress to Android App Builder plugin <= 1.1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Mobile App Editor – WordPress to Android App Builder plugin versions = 1.1.1. Solution Update the WordPress Mobile App Editor – WordPress to Android App Builder plugin to the latest available version a...

Bypassing Apple’s AirTag Security

A Berlin-based company has developed an AirTag clone that bypasses Apples anti-stalker security systems. Source code for these AirTag clones is available online. So now we have several problems with the system. Apples anti-stalker security only works with iPhones. Apple wrote an Android app that...

HCL Sametime 安全漏洞

HCL Sametime is a conferencing solution from HCL Software. A path traversal vulnerability exists in HCL Sametime that stems from the fact that HCL Sametime for Android is susceptible to multiple path traversal vulnerabilities...

CVE-2022-21153

Improper access control in the IntelR Capital Global Summit Android application may allow an authenticated user to potentially enable information disclosure via local access...

Intel Smart Campus Android App 安全漏洞

Intel Smart Campus Android App is a Smart Campus application from IntelR Corporation. A security vulnerability exists in the IntelR Smart Campus Android application that stems from incorrect access controls in the application that could allow authenticated users to potentially enable information...

Intel Capital Global Summit Android App 安全漏洞

Intel Capital Global Summit Android App is a Capital Global Summit app from Intel Corporation USA. A security vulnerability exists in Intel Capital Global Summit Android that stems from incorrect access control, where an authenticated user gains access to sensitive data via local access...

Intel® Smart Campus Android App Advisory

Summary: A potential security vulnerability in the Intel® Smart Campus Android application may allow information disclosure. Intel is releasing application updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21157 Description: Improper access control in the...

CVE-2021-41166

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

CVE-2021-41166

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

Information disclosure

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

CVE-2021-41166 Permission bypass in Nextcloud Android App

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

CVE-2021-41166

CVE-2021-41166 affects the Nextcloud Android app. An unauthorized app lacking the MANAGE_DOCUMENTS permission may view image thumbnails for images it should not access. The issue is fixed in version 3.17.1; there are no known workarounds. Users and administrators should upgrade to 3.17.1 or later...