CVE-2026-60117

The Android implementation of the Flutter/Dart receive_sharing_intent package (versions 1.4.1 through 1.9.0 ) is vulnerable to a path traversal vulnerability in FileDirectory.getDataColumn. A malicious co-resident application can exploit this by providing a crafted _display_name value via an untr...

EUVD-2026-120158

The Android implementation of the Flutter/Dart receivesharingintent package, versions 1.4.1 through 1.9.0, contains a path traversal vulnerability in FileDirectory.getDataColumn that allows a malicious co-resident application to write files outside the intended cache directory by supplying a...

PT-2026-140939

The Android implementation of the Flutter/Dart receive sharing intent package, versions 1.4.1 through 1.9.0, contains a path traversal vulnerability in FileDirectory.getDataColumn that allows a malicious co-resident application to write files outside the intended cache directory by supplying a...

CVE-2026-107023

A flaw was found in MyBrain. Insecure permissions in the ContentProvider component, which manages application data, allow unauthorized attackers to access sensitive user records. An attacker can exploit this issue to arbitrarily read private notes, tasks, and diary entries, resulting in...

CVE-2026-89229

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in the ShareActivity component of BlueLM Copilot com.vivo.ai.copilot allows a malicious application installed on the same device to write arbitrary files via a crafted ACTIONSEND intent with a ContentProvider-supplied fi...

CVE-2026-89229

The BlueLM Copilot (package name com.vivo.ai.copilot) application is vulnerable to a Path Traversal vulnerability in its ShareActivity component. A malicious application installed on the same device can write arbitrary files by sending a crafted ACTION_SEND intent. This attack is achieved by supp...

EUVD-2026-115734

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in the ShareActivity component of BlueLM Copilot com.vivo.ai.copilot allows a malicious application installed on the same device to write arbitrary files via a crafted ACTIONSEND intent with a ContentProvider-supplied fi...

CVE-2026-89229

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in the ShareActivity component of BlueLM Copilot com.vivo.ai.copilot allows a malicious application installed on the same device to write arbitrary files via a crafted ACTIONSEND intent with a ContentProvider-supplied fi...

CVE-2026-107023

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

CVE-2026-107023: n/a: Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to…

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

PT-2026-132177

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

CVE-2026-107023

The mhss1 MyBrain application, specifically version v3.1.0 , contains a vulnerability due to insecure permissions within the ContentProvider component. This security flaw allows an unauthorized attacker to arbitrarily read private data, including notes, tasks, and diary content , belonging to ano...

CVE-2026-107023

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

EUVD-2026-113180

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

CVE-2026-107023

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

CVE-2026-101886

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

CVE-2026-101886 Cisco Jabber for Android Path Traversal via Shared Content URI

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

EUVD-2026-94456

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

CVE-2026-101886 Cisco Jabber for Android Path Traversal via Shared Content URI

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

CVE-2026-101886

Cisco Jabber for Android (com.cisco.im) versions prior to 15.3.1.311364 are vulnerable to a path traversal vulnerability. The flaw exists because the exported crosslaunch.share activity uses an unsanitized display name from a ContentProvider during file path construction. A malicious application ...