CVE-2026-12960

CVE-2026-12960 Improper Export of Android Application Components in the ASUS Router App A component bundled in the ASUS Router Android app com.asus.aihome was declared android:exported="true" with no android:permission. Any other app on the same device, holding zero permissions, could send it a...

CVE-2026-81301

Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps a caller-controlled URI path directly to a filesystem path via new File(...), supporting query() , openFile() , and delete() ...

Exploit for CVE-2026-12960

CVE-2026-12960 Improper Export of Android Application Compo...

CVE-2026-57848 Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation

Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...

EUVD-2021-12321

Malware in sbrugna...

EUVD-2023-46910

Malicious code in bioql PyPI...

EUVD-2025-24941

Malicious code in bioql PyPI...

Creality Cloud App 安全漏洞

Creality Cloud App is a 3D printing mobile application from Creality China. A security vulnerability exists in Creality Cloud App version 6.1.0 and earlier, which stems from an improperly exported component com.cxsw.sdprinter in the file AndroidManifest.xml, which could lead to a localhost attack...

SKTLab Mukbee App 安全漏洞

SKTLab Mukbee App is a food recommendation and community sharing app from SKTLab USA. A security vulnerability exists in SKTLab Mukbee App version 1.01.196, which stems from an improperly exported component com.dw.android.mukbee in the AndroidManifest.xml file, which could lead to a local attack...

Euro Information CIC banque et compte en ligne App 安全漏洞

Euro Information CIC banque et compte en ligne App is an official banking mobile application from Euro Information, France. A security vulnerability exists in Euro Information CIC banque et compte en ligne App version 12.56.0, which stems from an improperly exported com.cicprod.bad component that...

BuzzFeed App 安全漏洞

BuzzFeed App is a mobile application from BuzzFeed Inc. in the United States. A security vulnerability exists in BuzzFeed App version 2024.9, which stems from an improperly exported AndroidManifest.xml file component...

CVE-2025-50861

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...

CVE-2025-50861

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...

CVE-2025-50861

The Lotus Cars Android app (com.lotus.carsdomestic.intl) version 1.2.8 contains an exported component, PushDeepLinkActivity , which is accessible without authentication via ADB or malicious apps. This vulnerability allows for unintended access to application internals, potentially leading to deni...

CVE-2025-50861

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...

CVE-2025-50861

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...

Lobby Universe Lobby App 安全漏洞

Lobby Universe Lobby App is a random video calling app from Lobby Universe, Inc. in the United States. A security vulnerability exists in Lobby Universe Lobby App version 2.8.0 and earlier, which stems from an improperly exported AndroidManifest.xml component...

CVE-2021-25425

Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component...

SAMSUNG AODService 安全漏洞

SAMSUNG AODService is a display function program from Samsung South Korea. A security vulnerability exists in SAMSUNG AODService versions prior to 8.8.28.12, which stems from an improperly exported Android application component, and could allow a local attacker to initiate arbitrary activity with...

SAMSUNG My Files 安全漏洞

SAMSUNG My Files is used by South Korea's Samsung SAMSUNG to manage all the files on a smartphone, just like a file browser on a computer. A security vulnerability exists in SAMSUNG My Files version 15.0.07.5, which stems from an improperly exported Android application component that allows a loc...