31 matches found
CVE-2026-12960
CVE-2026-12960 Exportación incorrecta de componentes de aplicación de Android en la aplicación ASUS Router Un componente incluido en la aplicación ASUS Router para Android com.asus.aihome se declaró android:exported="true" sin android:permission. Cualquier otra aplicación en el mismo dispositivo,...
CVE-2026-93832
A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...
EUVD-2026-91031
A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...
CVE-2026-81301
Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps a caller-controlled URI path directly to a filesystem path via new File(...), supporting query() , openFile() , and delete() ...
Exploit for CVE-2026-12960
CVE-2026-12960 Improper Export of Android Application Compo...
CVE-2026-57848 Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation
Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...
EUVD-2021-12321
Malware in sbrugna...
EUVD-2023-46910
Malicious code in bioql PyPI...
EUVD-2025-24941
Malicious code in bioql PyPI...
Creality Cloud App 安全漏洞
Creality Cloud App is a 3D printing mobile application from Creality China. A security vulnerability exists in Creality Cloud App version 6.1.0 and earlier, which stems from an improperly exported component com.cxsw.sdprinter in the file AndroidManifest.xml, which could lead to a localhost attack...
SKTLab Mukbee App 安全漏洞
SKTLab Mukbee App is a food recommendation and community sharing app from SKTLab USA. A security vulnerability exists in SKTLab Mukbee App version 1.01.196, which stems from an improperly exported component com.dw.android.mukbee in the AndroidManifest.xml file, which could lead to a local attack...
Euro Information CIC banque et compte en ligne App 安全漏洞
Euro Information CIC banque et compte en ligne App is an official banking mobile application from Euro Information, France. A security vulnerability exists in Euro Information CIC banque et compte en ligne App version 12.56.0, which stems from an improperly exported com.cicprod.bad component that...
BuzzFeed App 安全漏洞
BuzzFeed App is a mobile application from BuzzFeed Inc. in the United States. A security vulnerability exists in BuzzFeed App version 2024.9, which stems from an improperly exported AndroidManifest.xml file component...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
CVE-2025-50861
The Lotus Cars Android app (com.lotus.carsdomestic.intl) version 1.2.8 contains an exported component, PushDeepLinkActivity , which is accessible without authentication via ADB or malicious apps. This vulnerability allows for unintended access to application internals, potentially leading to deni...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
Lobby Universe Lobby App 安全漏洞
Lobby Universe Lobby App is a random video calling app from Lobby Universe, Inc. in the United States. A security vulnerability exists in Lobby Universe Lobby App version 2.8.0 and earlier, which stems from an improperly exported AndroidManifest.xml component...