CVE-2022-38633

Genymotion Desktop v3.2.1 was discovered to contain a DLL hijacking vulnerability which allows attackers to escalate privileges and execute arbitrary code via a crafted binary...

CVE-2022-38633

Genymotion Desktop v3.2.1 is affected by a DLL hijacking vulnerability that can allow privilege escalation and arbitrary code execution via a crafted binary. The issue stems from loading a malicious DLL with the same name, enabling an attacker with local access to execute code with high privilege...

PT-2022-24493 · Genymotion · Genymotion Desktop

Name of the Vulnerable Software and Affected Versions: Genymotion Desktop version 3.2.1 Description: The issue allows attackers to escalate privileges and execute arbitrary code via a crafted binary, leveraging a DLL hijacking vulnerability. Recommendations: For Genymotion Desktop version 3.2.1,...

CVE-2022-38633: Uncontrolled Search Path Element

Genymotion Desktop v3.2.1 was discovered to contain a DLL hijacking vulnerability which allows attackers to escalate privileges and execute arbitrary code via a crafted binary...

Genymotion Desktop 代码问题漏洞

Genymotion Desktop is an Android emulator from Genymotion. A security vulnerability exists in Genymotion Desktop version 3.2.1, which stems from a missing profapi.dll, and can be exploited by an attacker to use a malicious dll with the same name and gain administrator privileges, as well as execu...

CVE-2021-27549

Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended behavior that can be changed through the Settings Device screen...

CVE-2021-27549

Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended behavior that can be changed through the Settings Device screen...

CVE-2021-27549

Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended behavior that can be changed through the Settings Device screen...

Default configuration

DISPUTED Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended behavior that can be changed through the Settings Device screen...

CVE-2021-27549

Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended behavior that can be changed through the Settings Device screen...

CVE-2021-27549

Genymotion Desktop (up to 3.2.0) leaks the host clipboard data to the Android application by default. The issue is due to this default behavior, which the vendor states can be changed via Settings > Device screen. Connected sources confirm the affected version range and the remediation path: a...

CVE-2021-27549: Cleartext Storage of Sensitive Information

Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended behavior that can be changed through the Settings Device screen...

Genymotion Information Disclosure Vulnerability

Genymotion Desktop is an Android emulator from Genymotion. An information disclosure vulnerability previously existed in Genymotion Desktop version 3.2.0, which stemmed from some unknown functionality in the clipboard handler. The vulnerability results in information disclosure due to operations...

PT-2021-17502 · Genymotion · Genymotion Desktop

Name of the Vulnerable Software and Affected Versions: Genymotion Desktop versions 3.2.0 and earlier Description: The issue concerns the leakage of the host's clipboard data to the Android application by default. It is worth noting that the vendor considers this behavior as intended and...

Exploit for Improper Handling of Exceptional Conditions in Google Android

ServiceCheater CVE-2020-0113 & CVE-2020-0108 Analysis o...

BadIntent - Intercept, Modify, Repeat and Attack Android's Binder Transactions Using Burp Suite

BadIntent is the missing link between the Burp Suite and the core Android's IPC/Messaging-system. BadIntent consists of two parts, an Xposed-based module running on Android and a Burp-plugin. Based on this interplay, it is possible to use the Burp's common workflow and all involved tools and...

Inspeckage - (Android Package Inspector) Dynamic Analysis With Api Hooks, Start Unexported Activities And More

Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. http://ac-pm.github.io/Inspeckage https://twitter.com/inspeckage...