CVE-2020-10833

An issue was discovered on Samsung mobile devices with Q10.0 software. The DeX Lockscreen allows attackers to access the quick panel and notifications. The Samsung ID is SVE-2019-16532 March 2020...

PT-2020-12356

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 software Description An issue was discovered that allows attackers to access the quick panel and notifications through the DeX Lockscreen. Recommendations For Samsung mobile devices with Q10.0 software, at the...

CVE-2020-10833: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with Q10.0 software. The DeX Lockscreen allows attackers to access the quick panel and notifications. The Samsung ID is SVE-2019-16532 March 2020...

GDA Android Reversing Tool - A New Decompiler Written Entirely In C++, So It Does Not Rely On The Java Platform, Which Is Succinct, Portable And Fast, And Supports APK, DEX, ODEX, Oat

Here, a new Dalvik bytecode decompiler, GDA（this project started in 2013 and released its first version 1.0 in 2015 at www.gda.com: 9090 , is proposed and implemented in C++ to provide more sophisticated, fast and convenient decompilation support. GDA is completely self-independent and very stabl...

CVE-2019-15350

The CVE-2019-15350 entry describes a vulnerability on Tecno Camon Android devices where a pre-installed platform app (com.lovelyfont.defcontainer, versionCode 7) exposes an exported service (com.lovelyfont.manager.service.FunctionService) that allows any local app to supply a Dex file path, which...

CVE-2019-15349

The CVE-2019-15349 entry describes a pre-installed platform app on Tecno Camon devices (package com.lovelyfont.defcontainer, version 7.0.11) that exposes an exported service (com.lovelyfont.manager.service.FunctionService). This service accepts a file path to a Dalvik Executable (DEX) file from a...

CVE-2019-15345

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...

PT-2019-14070

Name of the Vulnerable Software and Affected Versions Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys Description The pre-installed platform app com.lovelyfont.defcontainer contains an exported service named...

CVE-2019-15346: Exposure of Resource to Wrong Sphere

The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service...

CVE-2019-15345: Exposure of Resource to Wrong Sphere

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...

CVE-2019-15349: Exposure of Resource to Wrong Sphere

The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service named...

PT-2019-14078

Name of the Vulnerable Software and Affected Versions Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys Description The issue concerns a pre-installed platform app with a package name of com.lovelyfont.defcontainer that contai...

Mobile Menace Monday: Android Trojan raises xHelper

Back in May, we classified what we believed was just another generic Android/Trojan.Dropper, and moved on. We didn’t give this particular mobile malware much thought until months later, when we started noticing it had climbed onto our top 10 list of most detected mobile malware. Henceforth, we fe...

50m-ctf: LFI on Accounting server and RCE on FliteThermostat admin server

Summary: An attacker is able to download local files on the Accounting server due leveraging improper input sanitization in the Invoice PDF generator. In the same fashion an attacker is also able to issue server-side requests on the Accounting server through user-controlled CSS, possibly leading ...

radare2 buffer overflow vulnerability (CNVD-2018-09700)

radare2 is a set of libraries and tools for working with binary files. A heap buffer out-of-bounds read vulnerability exists in the 'dalvikop' function libr/anal/p/analdalvik.c file in radare2 version 2.5.0. A remote attacker can exploit this vulnerability to cause a denial of service via a...

radare2 buffer overflow vulnerability (CNVD-2018-09699)

radare2 is a set of libraries and tools for working with binary files. A heap buffer out-of-bounds read vulnerability exists in the 'rhexbin2str' function libr/util/hex.c file in radare2 version 2.5.0. A remote attacker can exploit this vulnerability to cause a denial of service with a specially...

CVE-2018-10187

In radare2 2.5.0, there is a heap-based buffer over-read in the dalvikop function libr/anal/p/analdalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. Note that this issue is different from CVE-2018-8809, which was patched earlier...

CVE-2018-10187

In radare2 2.5.0, there is a heap-based buffer over-read in the dalvikop function libr/anal/p/analdalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. Note that this issue is different from CVE-2018-8809, which was patched earlier...

Heap overflow

In radare2 2.5.0, there is a heap-based buffer over-read in the dalvikop function libr/anal/p/analdalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. Note that this issue is different from CVE-2018-8809, which was patched earlier...

CVE-2018-10186

In radare2 2.5.0, there is a heap-based buffer over-read in the rhexbin2str function libr/util/hex.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368...