EUVD-2023-54294

Malicious code in bioql PyPI...

Malicious code in @malware-test-inure-rondo-woven-total/test-mlw3-inure-rondo-woven-total (npm)

The package @malware-test-inure-rondo-woven-total/test-mlw3-inure-rondo-woven-total was found to contain malicious code...

CVE-2023-5321

Missing Authorization in GitHub repository hamza417/inure prior to build94...

CVE-2024-0245 Task Hijacking in hamza417/inure

A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a...

CVE-2024-0245 Task Hijacking in hamza417/inure

A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a...

Inure 信息泄露漏洞

Inure is an Android application manager by the individual developer Hamza Rizwan. An information disclosure vulnerability exists in versions prior to Inure build97, which stems from a misconfiguration of the AndroidManifest.xml file and could lead to task hijacking and disclosure of sensitive...

Authorization

Missing Authorization in GitHub repository hamza417/inure prior to Build95...

inure Security Vulnerabilities

inure is an elegant application manager for Android by the individual developer Hamza Rizwan. A security vulnerability exists in versions prior to inure Build95 that stems from improper application authorization and allows opening arbitrary files...

PT-2023-32381 · Inure · Inure

Name of the Vulnerable Software and Affected Versions: inure versions prior to Build95 Description: The issue concerns a missing authorization in the GitHub repository hamza417/inure. Recommendations: For versions prior to Build95, update to Build95 or later to resolve the issue...

Improper Authorization allows opening of arbitrary files

Description Tested on Build94 of the Inure application. It was discovered that the application had an exported activity .activities.association.TextViewerActivity which accepted intent data via the file scheme + text/ mime type and opened the associated files from provided URI data string. The...

inure Security Vulnerabilities

inure is an elegant application manager for Android by the individual developer Hamza Rizwan. A security vulnerability exists in versions prior to inure build94, which stems from a lack of authorization...

Improper validation of intent data received in TextViewerActivity allows opening of arbitrary files in hamza417/inure

Description Tested on Build89 of the Inure application. It was discovered that the application had an exported activity .activities.association.TextViewerActivity which accepted intent data via the file scheme + text/ mime type and opened the associated files from provided URI data string. The...

CVE-2023-4877 Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92...

inure Information Disclosure Vulnerability

inure is an elegant application manager for Android by Hamza Rizwan Individual Developer. inure suffers from an information disclosure vulnerability that originates from exposing sensitive information to unauthorized participants...

inure Information Disclosure Vulnerability

inure is an elegant application manager for Android by Hamza Rizwan Individual Developer. inure suffers from an information disclosure vulnerability that originates from exposing sensitive information to unauthorized participants...

PT-2023-30951 · Inure · Inure

Name of the Vulnerable Software and Affected Versions: inure versions prior to build92 Description: The issue concerns exposure of sensitive information to an unauthorized actor in the GitHub repository hamza417/inure. Recommendations: For versions prior to build92, update to build92 or later to...

PT-2023-30943 · Inure · Inure

Name of the Vulnerable Software and Affected Versions: inure versions prior to build92 Description: The issue concerns exposure of sensitive information to an unauthorized actor in the GitHub repository hamza417/inure. Recommendations: For versions prior to build92, update to build92 or later to...

CVE-2023-4435

Improper Input Validation in GitHub repository hamza417/inure prior to build88...

Authorization

Missing Authorization in GitHub repository hamza417/inure prior to build88...

CVE-2023-4435 Improper Input Validation in hamza417/inure

Improper Input Validation in GitHub repository hamza417/inure prior to build88...