31593 matches found
ASB-A-381339822
In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-301952571
In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
ASB-A-417987184
In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is...
CVE-2025-58305
Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58312
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-13771
creationtimestamp| type| source ---|---|--- 2025-11-28 10:03:00+00:00| seen| https://infosec.exchange/users/offseq/statuses/115626749410261118 2025-11-28 10:03:02+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m6omy3254v26 2025-11-28 11:04:14+00:00| seen|...
ExploitForge
Getting Started with Create React App This project was bootst...
CVE-2025-58305
Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58305
Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-64314
creationtimestamp| type| source ---|---|--- 2025-11-28 04:03:45+00:00| seen| https://infosec.exchange/users/offseq/statuses/115625336769891996 2025-11-28 04:03:46+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m6nyvodbvj26 2025-11-28 05:33:56+00:00| seen|...
CVE-2025-58312
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58312
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2025-199858
Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58305
Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58305
Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58305
Huawei HarmonyOS contains an authentication bypass vulnerability in the Gallery app (CVE-2025-58305). Affected: HarmonyOS Gallery app; Root cause described as authentication bypass within the Gallery component. Impact: confidentiality of service could be compromised if exploited. Exploit details,...
CVE-2025-58312
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58312
CVE-2025-58312 is a Huawei HarmonyOS privilege-control vulnerability in the App Lock module. Descriptions cite a local, privilege-based weakness in the App Lock component that can affect availability. Connected documents corroborate a privilege-control flaw across Huawei HarmonyOS sources (CNVD/C...