platform_packages_providers_MediaProvider_CVE-2023-40127

This repository does not have a README...

frameworks_base_AOSP10_r33_CVE-2020-0137

This repository does not have a README...

frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...

frameworks_base_AOSP10_r33_CVE-2023-21246

This repository does not have a README...

EUVD-2026-117820

Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker capable of intercepting the victim's traffic could read and modify...

EUVD-2026-117815

Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An attacker with access to the device's local data or a backup could retrieve usernames and passwords and use them to gain unauthorized access to accounts on the platform...

EUVD-2026-117816

SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud Messaging and constructs queries by concatenating untrusted data. An attacker capable of interacting with the component could manipulate queries and access sensitive...

external_curl_AOSP10_r33_CVE-2021-22924

| | | | | | / | | | | | | | | | || | | | |/|| \| README Curl is a command line tool for transferring data specified with URL syntax. Find out how to use curl by reading the curl.1 man page or the MANUAL document. Find out how to install Curl by reading the INSTALL document. libcurl is the...

packages_apps_Settings_CVE-2021-0586

This repository does not have a README...

phonepe-sensitive-data-exposure-cve-2025-5154

-Insecure-Local-Storage-of-Sensitive-User-Data-in-PhonePe-Android-App-Unpatched- Discovered byhc4 Date Reported: April 2025 CVE Status: CVE Requested Pending CVE Request 1862785 for CVE ID Reques 📌 Overview A critical local vulnerability was discovered in the PhonePe Android app tested on...

CVE-2019-2215

CVE-2019-2215 The following issue exists in the android-msm-wahoo-4.4-pie branch of https://android.googlesource.com/kernel/msm and possibly others: There is a use-after-free of the wait member in the binderthread struct in the binder driver at /drivers/android/binder.c. As described in the...

frameworks_base_AOSP_06_r22_CVE-2022-20338

This repository does not have a README...

frameworks_av_AOSP_10_r33_CVE-2023-35687_CVE-2023-35679

This repository does not have a README...

packages_apps_Nfc_AOSP10_r33_CVE-2020-0453

This repository does not have a README...

CVE-2026-68509 FairEmail: Path traversal in shared attachment handling can write files outside the intended shared directory

FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2325, shared attachment handling does not adequately sanitize an attacker-controlled filename before constructing its destination path. A local attacker-controlled app can therefore supply path componen...

CVE-2026-68509

The FairEmail Android application (prior to version 1.2325 ) is vulnerable to a path traversal flaw in its shared attachment handling. The application fails to adequately sanitize attacker-controlled filenames when constructing destination paths. This allows a local malicious app to supply path c...

CVE-2026-111494

Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker capable of intercepting the victim's traffic could read and modify...

CVE-2026-111492

SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud Messaging and constructs queries by concatenating untrusted data. An attacker capable of interacting with the component could manipulate queries and access sensitive...

CVE-2026-111491

Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An attacker with access to the device's local data or a backup could retrieve usernames and passwords and use them to gain unauthorized access to accounts on the platform...

CVE-2026-111494

The MatchPoint Android app by TPC Software is vulnerable to incorrect validation of TLS certificates . The root cause is a TrustManager that accepts any certificate combined with a permissive hostname validator. Furthermore, the application permits unencrypted HTTP traffic . These flaws allow an ...