Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security

Security Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security Share January 30th, 2025 Hey Opera users! You might have seen that Opera for Android has achieved a new security-focused milestone: If you search for Opera for Android...

CVE-2025-0575

Union Bank of India Vyom Android app (version 8.0.34) contains a vulnerability in the Rooting Detection component. Local manipulation can cause protection mechanism failure; attack complexity is high, and exploitation is deemed difficult, but a public exploit has been disclosed. Affected product:...

PT-2025-3966 · Union Bank Of India · Union Bank Of India Vyom

Name of the Vulnerable Software and Affected Versions: Union Bank of India Vyom version 8.0.34 Description: A problematic issue has been found in the Rooting Detection component of the Union Bank of India Vyom Android app. This issue can lead to a protection mechanism failure when manipulated...

CVE-2024-54125

Improper authorization in handler for custom URL scheme issue in "Shonen Jump+" App for Android versions prior to 4.0.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

"Shonen Jump+" App for Android fails to restrict custom URL schemes properly

Overview "Shonen Jump+" App for Android provided by SHUEISHA INC. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly CWE-939 which may be exploited to direct the App to access any sites. Toshiki Iwasaki of Mitsui Buss...

Thinkware Cloud APK 安全漏洞

Thinkware Cloud APK is a free Android app from Thinkware that allows easy access to Thinkware Car Recorder. A security vulnerability exists in Thinkware Cloud APK version v4.3.46 that stems from a hard-coded decryption key in the application, which allows an attacker to access sensitive data and...

CVE-2024-11026

A vulnerability was found in Intelligent Apps Freenow App 12.10.0 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ch/qos/logback/core/net/ssl/SSL.java of the component Keystore Handler. The manipulation of the argument...

CVE-2024-40240

An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function...

CVE-2024-40239

An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function...

CVE-2024-40240

An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function...

CVE-2024-40239

The CVE-2024-40239 issue affects the Android app Life: Personal Diary, Journal (version 17.5.0). The vulnerability is described as an incorrect access control that could allow a physically proximate attacker to escalate privileges through the app’s fingerprint authentication function. The availab...

CVE-2024-40239

An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function...

PT-2024-28799 · Unknown · Life: Personal Diary

Name of the Vulnerable Software and Affected Versions: Life: Personal Diary, Journal android app version 17.5.0 Description: An issue with access control in the Life: Personal Diary, Journal android app allows a physically proximate attacker to escalate privileges via the fingerprint authenticati...

CVE-2024-42041

The com.videodownload.browser.videodownloader aka AppTool-Browser-Video All Video Downloader application 20-30.05.24 for Android allows an attacker to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity component...

Talkatone com.talkatone.android application 安全漏洞

Talkatone com.talkatone.android application is an application for virtual phone calls from Talkatone, Inc. A security vulnerability exists in the Talkatone com.talkatone.android application, which originates from allowing any installed application without privileges to send a specially crafted...

CVE-2024-41999

Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the debug function to gain access to the OS functions, escalate the privilege, change the device's...

CVE-2024-42496

Smart-tab Android app installed April 2023 or earlier contains an issue with plaintext storage of a password. If this vulnerability is exploited, an attacker with physical access to the device may retrieve the credential information and spoof the device to access the related external service...

CVE-2024-42496

Smart-tab Android app (affected component: plaintext storage of a password) is vulnerable to credential exposure if a device is physically accessed. The CVE description and connected sources indicate that storing passwords plaintext can allow an attacker with physical access to retrieve credentia...

PT-2024-29990 · Unknown · Smart-Tab Android App

Name of the Vulnerable Software and Affected Versions: Smart-tab Android app versions April 2023 or earlier Description: The issue concerns the storage of passwords in plaintext. If exploited, an attacker with physical access to the device may retrieve credential information and spoof the device ...

PT-2024-29682 · Unknown · Smart-Tab Android App

Name of the Vulnerable Software and Affected Versions: Smart-tab Android app versions prior to May 2023 Description: The issue concerns an active debug code vulnerability in the Smart-tab Android app. If exploited, an attacker with physical access to the device may use the debug function to acces...