Lucene search
K

75479 matches found

Malwarebytes
Malwarebytes
added 2026/03/23 12:42 p.m.6 views

Advanced Flow will make Android sideloading safer

Google has announced the introduction of Advanced Flow, designed to let Android users install apps from unverified developers more safely than before. This process is known as sideloading. It means installing an app on your device from somewhere other than the Google Play store, usually by...

5.8AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2026/03/23 12:0 a.m.5 views

(Pwn2Own) Samsung Galaxy S25 Samsung Account Open Redirect Security Bypass Vulnerability

This vulnerability allows remote attackers to bypass security on affected installations of Samsung Galaxy S25. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Samsung Account application. An attacker can force a redirection to a site that serves...

5.6CVSS5.9AI score0.00128EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2026/03/22 9:1 p.m.126 views

Exploit for Integer Overflow or Wraparound in Qualcomm Sm7675P_Firmware

CVE-2026-21385 Scanner Languages / Idiomas: Englishen...

7.8CVSS7.5AI score0.01068EPSS
Exploits3
EUVD
EUVD
added 2026/03/22 3:31 p.m.4 views

EUVD-2019-19952

EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge. Attackers can use adb logcat to extract plaintext passwords logged during the forgot password function, exposing us...

8.7CVSS5.8AI score0.00273EPSS
Exploits0References4
NVD
NVD
added 2026/03/22 2:16 p.m.3 views

CVE-2019-25605

EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge. Attackers can use adb logcat to extract plaintext passwords logged during the forgot password function, exposing us...

8.7CVSS0.00273EPSS
Exploits0References3
CVE
CVE
added 2026/03/22 1:38 p.m.5 views

CVE-2019-25605

EquityPandit 1.0 contains an insecure logging vulnerability that exposes plaintext user credentials through Android Debug Bridge. Attackers could access developer console logs via adb logcat and extract passwords logged during the forgot password flow, compromising user account credentials. The i...

8.7CVSS5.8AI score0.00273EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/22 1:38 p.m.27 views

CVE-2019-25605 EquityPandit 1.0 Insecure Logging Information Disclosure

EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge. Attackers can use adb logcat to extract plaintext passwords logged during the forgot password function, exposing us...

8.7CVSS0.00273EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/22 1:38 p.m.1 views

CVE-2019-25605

EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge. Attackers can use adb logcat to extract plaintext passwords logged during the forgot password function, exposing us...

8.7CVSS5.8AI score0.00273EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/22 1:38 p.m.3 views

CVE-2019-25605 EquityPandit 1.0 Insecure Logging Information Disclosure

EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge. Attackers can use adb logcat to extract plaintext passwords logged during the forgot password function, exposing us...

8.7CVSS5.8AI score0.00273EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/03/22 12:25 a.m.3 views

SUSE CVE-2026-4439

Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS6.1AI score0.00341EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/22 12:0 a.m.1 views

PT-2026-26993

EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge. Attackers can use adb logcat to extract plaintext passwords logged during the forgot password function, exposing us...

8.7CVSS5.8AI score0.00273EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/03/22 12:0 a.m.3 views

EquityPandit 安全漏洞

EquityPandit is a service platform provided by EquityPandit Inc. that offers stock market analysis, investment advice, and market predictions. Version 1.0 of EquityPandit has a security vulnerability. This vulnerability stems from insecure logging practices, which could allow attackers to access...

8.7CVSS5.8AI score0.00273EPSS
Exploits0References3
EUVD
EUVD
added 2026/03/21 12:31 a.m.5 views

EUVD-2026-13808

ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

7.4CVSS5.8AI score0.00169EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.3 views

WordPress plugin App Builder – Create Native Android & iOS Apps On The Flight 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension that can ...

6.5CVSS5.8AI score0.0028EPSS
Exploits0References3
NVD
NVD
added 2026/03/20 10:16 p.m.4 views

CVE-2026-2378

ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

7.4CVSS0.00169EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/20 9:16 p.m.21 views

CVE-2026-2378 Address bar spoofing risk in ArcSearch on Android

ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

7.4CVSS0.00169EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/20 9:16 p.m.2 views

CVE-2026-2378 Address bar spoofing risk in ArcSearch on Android

ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

7.4CVSS5.8AI score0.00169EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/20 9:16 p.m.6 views

CVE-2026-2378

ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

5.8AI score0.00169EPSS
Exploits0References2
CVE
CVE
added 2026/03/20 9:16 p.m.6 views

CVE-2026-2378

ArcSearch for Android versions prior to 1.12.7 is affected by an address bar spoofing issue. The browser could display a different domain in the address bar than the actual content after user interaction with crafted web content. Affected product: ArcSearch on Android, versions

7.4CVSS5.8AI score0.00169EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/03/20 7:16 p.m.2 views

CVE-2026-32317

Cryptomator for Android offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 1.12.3, an integrity check vulnerability allows an attacker tamper with the vault configuration file leading to a man-in-the-middle vulnerability in Hub key loading mechanism...

7.6CVSS0.00062EPSS
Exploits0References2
Rows per page
Query Builder