2595 matches found
WordPress plugin Exit Intent Popup 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
CVE-2025-58641: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/a through = 1.0.1...
CVE-2025-21039: Undefined Security Weakness
Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information...
CVE-2023-21474: Undefined Security Weakness
Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege...
PT-2025-35677
Name of the Vulnerable Software and Affected Versions SecSettings versions prior to SMR Apr-2022 Release 1 Description An intent redirection issue exists in SecSettings that allows attackers to access arbitrary files with system privileges. Recommendations Update SecSettings to SMR Apr-2022 Relea...
CVE-2025-22433
In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...
CVE-2025-22433
In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...
CVE-2025-22418
In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22418
In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22433
In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...
CVE-2025-22433
In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...
CVE-2025-22433
In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...
CVE-2025-22433
A logic error in the canForward function of IntentForwarderActivity.java within the Google Android operating system allows for a bypass of the cross-profile intent filter , which is primarily used in Work Profile scenarios. This vulnerability can result in a local escalation of privilege without ...
CVE-2025-22418
In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22418
In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22418
In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22418
The Google Android operating system is affected by an elevation of privilege vulnerability (CVE-2025-22418) caused by intent redirection in multiple locations, which can result in a confused deputy condition. This flaw allows an attacker to gain elevated privileges on the system without requiring...
PT-2025-35623
Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The issue involves a potential confused deputy condition due to Intent Redirect. Exploitation could lead to local escalation of privilege without requiring additional execution privileges or user...
PT-2025-35632
Name of the Vulnerable Software and Affected Versions: IntentForwarderActivity.java affected versions not specified Description: A logic error in the canForward function within IntentForwarderActivity.java may allow bypassing the cross-profile intent filter, commonly used in Work Profile scenario...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by intent redirection in multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the system...