Lucene search
+L

2595 matches found

CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•10 views

WordPress plugin Exit Intent Popup 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

5.4CVSS6.8AI score0.00171EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•2 views

CVE-2025-58641: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/a through = 1.0.1...

5.4CVSS5.8AI score0.00171EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•1 views

CVE-2025-21039: Undefined Security Weakness

Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information...

5.1CVSS5.8AI score0.00111EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•6 views

CVE-2023-21474: Undefined Security Weakness

Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege...

7.1CVSS5.9AI score0.00114EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/03 12:00 a.m.•20 views

PT-2025-35677

Name of the Vulnerable Software and Affected Versions SecSettings versions prior to SMR Apr-2022 Release 1 Description An intent redirection issue exists in SecSettings that allows attackers to access arbitrary files with system privileges. Recommendations Update SecSettings to SMR Apr-2022 Relea...

7.1CVSS6.4AI score0.00114EPSS
SaveExploits0References5
OSV
OSV
•added 2025/09/02 11:15 p.m.•17 views

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS5.7AI score0.00095EPSS
SaveExploits0References3
NVD
NVD
•added 2025/09/02 11:15 p.m.•18 views

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS0.00095EPSS
SaveExploits0References3
OSV
OSV
•added 2025/09/02 11:15 p.m.•15 views

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00079EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/02 11:15 p.m.•17 views

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00079EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/09/02 10:11 p.m.•11 views

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS5.4AI score0.00095EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2025/09/02 10:11 p.m.•27 views

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

0.00095EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/09/02 10:11 p.m.•10 views

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

6.2AI score0.00095EPSS
SaveExploits0References3
CVE
CVE
•added 2025/09/02 10:11 p.m.•471 views

CVE-2025-22433

A logic error in the canForward function of IntentForwarderActivity.java within the Google Android operating system allows for a bypass of the cross-profile intent filter , which is primarily used in Work Profile scenarios. This vulnerability can result in a local escalation of privilege without ...

7.8CVSS6.2AI score0.00095EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2025/09/02 10:11 p.m.•10 views

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.6AI score0.00079EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/09/02 10:11 p.m.•28 views

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00079EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/02 10:11 p.m.•3 views

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.4AI score0.00079EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/02 10:11 p.m.•450 views

CVE-2025-22418

The Google Android operating system is affected by an elevation of privilege vulnerability (CVE-2025-22418) caused by intent redirection in multiple locations, which can result in a confused deputy condition. This flaw allows an attacker to gain elevated privileges on the system without requiring...

7.8CVSS6.4AI score0.00079EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/02 12:00 a.m.•8 views

PT-2025-35623

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The issue involves a potential confused deputy condition due to Intent Redirect. Exploitation could lead to local escalation of privilege without requiring additional execution privileges or user...

7.8CVSS6.2AI score0.00079EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/09/02 12:00 a.m.•25 views

PT-2025-35632

Name of the Vulnerable Software and Affected Versions: IntentForwarderActivity.java affected versions not specified Description: A logic error in the canForward function within IntentForwarderActivity.java may allow bypassing the cross-profile intent filter, commonly used in Work Profile scenario...

7.8CVSS6.3AI score0.00095EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/09/02 12:00 a.m.•14 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by intent redirection in multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the system...

7.8CVSS5.8AI score0.00079EPSS
SaveExploits0References5
Rows per page
Query Builder