31585 matches found
CVE-2025-32319
CVE-2025-32319 affects the Android Framework, specifically the ensureBound path in RemotePrintService.java. The issue permits a background app to bypass foreground permissions, enabling local elevation of privilege with user-execution privileges required yet no user interaction needed for exploit...
CVE-2025-32319
In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions due to a permissions bypass. This could lead to local escalation of privilege with user execution privileges needed. User interaction is not needed for exploitation...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Demonstration Lab Next.js / React RSC RCE Th...
CVE-2025-66330
App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-66330
App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-66330
App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-66330
CVE-2025-66330 affects Huawei HarmonyOS’s file management app, causing a bypass of the app lock verification/checksum and potentially compromising service confidentiality. Documents consistently describe a lock-check bypass without listing specific vulnerable versions, exploit details, or remedia...
EUVD-2025-201673
App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-66330
App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
Exploit for CVE-2025-66478
CVE-2025-66478 – Next.js Server Actions RCE Vulnerability: Ana...
PT-2025-49574
In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2025-49580
In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to uninstall it due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...
PT-2025-49534
App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-14185 Yonyou U8 Cloud AppServletService.class sql injection
A vulnerability was identified in Yonyou U8 Cloud 5.0/5.0sp/5.1/5.1sp. The affected element is an unknown function of the file nc/pubitf/erm/mobile/appservice/AppServletService.class. Such manipulation of the argument usercode leads to sql injection. The attack may be launched remotely. The explo...
Exploit for Deserialization of Untrusted Data in Facebook React
Parameters - -f: File to scan default: urls.txt - -f...
Yonyou U8 Cloud SQL注入漏洞
Yonyou U8 Cloud is a cloud-based enterprise management system from China's UFIDA Yonyou Corporation. A SQL injection vulnerability exists in Yonyou U8 Cloud version 5.0, 5.0sp, 5.1, and 5.1sp, which originates from incorrect manipulation of the parameter usercode in the file...
Exploit for Deserialization of Untrusted Data in Facebook React
RSC Infra Scanner rscinfrascan.py is a fast, asynchronous...
Exploit for Deserialization of Untrusted Data in Facebook React
NextRce - Next.js RSC Exploit Tool CVE-2025-55182...
CVE-2025-34260
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/action/schedule endpoint. When an authenticated user adds a schedule to an existing task, the schedule name is stored and later rendered in schedule listings without HTML...