CVE-2023-47354

CVE-2023-47354 affects Super Reboot (Root) Recovery v1.0.3, where the PowerOffWidgetReceiver function can be triggered by a crafted Intent to arbitrarily reset or power off the device. Multiple connected sources (NVD, Red Hat, CVE listings) describe the issue and attribute an attack vector of LOC...

CVE-2023-47354: Undefined Security Weakness

An issue in the PowerOffWidgetReceiver function of Super Reboot Root Recovery v1.0.3 allows attackers to arbitrarily reset or power off the device via a crafted intent...

CVE-2024-20810: Improper Restriction of Rendered UI Layers or Frames

Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-20826: Undefined Security Weakness

Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information via implicit intent...

PT-2024-18717 · Samsung · Smart Suggestions

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices versions prior to SMR Feb-2024 Release 1 Description: The issue allows local attackers to get sensitive information due to an implicit intent hijacking vulnerability in Smart Suggestions. Recommendations: For versions...

Super Reboot (Root) Recovery Security Vulnerability

Super Reboot Root Recovery is a mobile desktop software by actuator Personal Developer. A security vulnerability exists in Super Reboot Root Recovery v1.0.3, which stems from an issue in the PowerOffWidgetReceiver function that allows an attacker to arbitrarily reset or power off a device with...

PT-2024-13445

Name of the Vulnerable Software and Affected Versions Super Reboot Root Recovery version 1.0.3 Description An issue in the PowerOffWidgetReceiver function allows attackers to arbitrarily reset or power off the device via a crafted intent. Recommendations For Super Reboot Root Recovery version...

PT-2024-18730 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.63.6 Description: The issue allows local attackers to access sensitive information via implicit intent. This is due to an implicit intent hijacking vulnerability in the SamsungAccount component of the Galaxy...

PT-2024-18733

Name of the Vulnerable Software and Affected Versions UPHelper library versions prior to 4.0.0 Description The issue allows local attackers to access sensitive information via implicit intent. This is due to an implicit intent hijacking vulnerability in the UPHelper library. Recommendations For...

PT-2024-18729

Name of the Vulnerable Software and Affected Versions Galaxy Store versions prior to 4.5.63.6 Description The issue allows local attackers to access sensitive information via implicit intent. This is related to an implicit intent hijacking vulnerability in the AccountActivity of the Galaxy Store...

PT-2024-18732 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.63.6 Description: The issue allows local attackers to access sensitive information via implicit intent due to an implicit intent hijacking vulnerability in the In-App Purchase IAP component of the Galaxy...

PT-2024-18731 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.63.6 Description: The issue allows local attackers to access sensitive information via implicit intent. This is related to an implicit intent hijacking vulnerability in the VoiceSearch component of the Galax...

PT-2024-4068 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to the ConvertToComponentName function in DreamService.java, which can be exploited due to intent redirection, potentially allowing an attacker to launch arbitrary...

CVE-2024-20807

Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information...

CVE-2024-20807

Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information...

Information disclosure

Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows attacker to get sensitive information...

CVE-2024-20807

CVE-2024-20807 describes an implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16. The issue enables a local attacker to obtain sensitive information due to improper handling of implicit intents within the Samsung Email app. The vulnerability is documented across mul...

CVE-2024-20807

Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information...

PT-2024-18713 · Samsung · Samsung Email

Name of the Vulnerable Software and Affected Versions: Samsung Email versions prior to 6.1.90.16 Description: The issue allows a local attacker to obtain sensitive information due to an implicit intent hijacking vulnerability. Recommendations: For versions prior to 6.1.90.16, update to version...

CVE-2024-20807: Undefined Security Weakness

Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information...