CVE-2026-58961

creationtimestamp| type| source ---|---|--- 2026-11-02 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20261103 2026-11-02 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20261103...

CVE-2026-58985

creationtimestamp| type| source ---|---|--- 2026-11-02 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20261103 2026-11-02 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20261103...

CVE-2026-59004

creationtimestamp| type| source ---|---|--- 2026-11-02 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20261103 2026-11-02 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20261103...

CVE-2026-58968

creationtimestamp| type| source ---|---|--- 2026-11-02 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20261103 2026-11-02 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20261103 2026-11-04...

CVE-2026-0053

The Android operating system is affected by a vulnerability where a primary user can disable secure nfc for other full users. This is caused by insufficient isolation between Android users. The flaw could lead to a local escalation of privilege without requiring additional execution privileges or...

CVE-2026-0053

In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android users. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

EUVD-2026-115550

In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android users. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-119736

Attendo formerly Petpooja Payroll Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability that allows attackers to extract production MQTT broker credentials by decompiling the APK's bundled Flutter configuration assets such as production.json and...

VIKIROOT

VIKIROOT This is a CVE-2016-5195 PoC for 64-bit Android 6.0.1 Marshmallow perhaps 7.0 ?, as well as an universal & stable temporal root tool. It does not require a SUID executable or any filesystem changes. Features SELinux bypass see below for details. Memory-only: does not modify the filesystem...

CVE-2026-119736

The Attendo (formerly Petpooja Payroll) Admin Android application, version 3.0.13 and earlier , is vulnerable to a hard-coded credentials vulnerability. Attackers can extract production MQTT broker credentials by decompiling the APK's bundled Flutter configuration assets, specifically production....

CVE-2026-119736 Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials

Attendo formerly Petpooja Payroll Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability that allows attackers to extract production MQTT broker credentials by decompiling the APK's bundled Flutter configuration assets such as production.json and...

EUVD-2026-115368

Attendo formerly Petpooja Payroll Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability that allows attackers to extract production MQTT broker credentials by decompiling the APK's bundled Flutter configuration assets such as production.json and...

CVE-2026-119736 Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials

Attendo formerly Petpooja Payroll Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability that allows attackers to extract production MQTT broker credentials by decompiling the APK's bundled Flutter configuration assets such as production.json and...

CVE-2026-118018

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the Downloads component in Firefox for Android...

Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access

A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google. Google says it is highly confident that device maker Videostrong intentionally put a backdoor in the boxes and sold access to criminals. They used t...

Applebee’s customer data exposed by password left in app

Applebee’s has fixed a security flaw that exposed customers’ personal information after a researcher discovered a database password embedded in the restaurant chain’s Android app. The researcher, Robert Wiggins, found the password with help from AI. It gave him access to an internal Applebee’s...

appmon

Welcome to AppMon! As seen at US & EU AppMon is an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida. This project was only possible because of Ole André Vadla Ravnås and I dedicate it to him. Follow him on GitHub, Twitte...

Diggy

Diggy Diggy can extract endpoints/URLs from apk files. It saves the result into a txt file for further processing. Dependencies apktool Usage ./diggy.sh /path/to/apk/file.apk You can also install it for easier access by running install.sh After that, you will be able to run Diggy as follows: digg...

chromium-browser: angle: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android

A flaw was found in ANGLE, a component within Google Chrome on Android. This out-of-bounds write vulnerability allows a remote attacker to potentially perform a sandbox escape by enticing a user to visit a specially crafted HTML page. This could lead to an attacker executing arbitrary code outsid...

ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page

A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute...