CVE-2020-0001

CVE-2020-0001 POC pour exécuter un composant système dans un processus d'application non fiable Blog https://zachinio.com/blogs/cve-2020-0001 Comment utiliser Exécutez l'application, assurez-vous que le processus "com.android.settings" n'existe pas, puis cliquez sur le bouton "start service"...

packages_apps_settings_AOSP10_r33_CVE-2021-0481

Questo repository non contiene un README...

packages_apps_Settings_AOSP10_r33_CVE-2020-0188_CVE-0219

Dieses Repository hat keine README-Datei...

packages_apps_Settings_CVE-2020-0201

Questo repository non contiene un README...

packages_apps_Settings_AOSP10_r33_CVE-2020-0219_CVE-2020-0188_old-one

Este repositorio nao tem um README...

packages_apps_settings_AOSP10_r33_CVE-2020-0394

Dieses Repository hat keine README-Datei...

EUVD-2020-1805

Malware in sbrugna...

EUVD-2020-1813

Malware in sbrugna...

EUVD-2018-21119

Malware in sbrugna...

EUVD-2020-1810

Malware in sbrugna...

EUVD-2016-5038

Malware in sbrugna...

CVE-2022-20297

In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

CVE-2022-20234

In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity, it gets both 'mComponentName' and 'pkgTitle' from user.An unprivileged app can use a malicous mComponentName with a benign pkgTitle e.g. Settings app to make users enable...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Feb-2025 Release 1, which stems from an improperly exported Android application componen...

PT-2023-18111 · Google · Android

Name of the Vulnerable Software and Affected Versions: Settings affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information disclosure...

CVE-2022-20321

In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Google Android Settings component that stems from a privilege bypass, and there is a possible way to bypass the factory reset privilege...

CVE-2021-39764

In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via app spoofing with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2021-39751

In Settings, there is a possible way to read Bluetooth device names without proper permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2019-1994

In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insecure default value. This could lead to unwanted access to development settings, with no additional execution privileges needed. User interaction is needed for exploitation...