2340 matches found
CVE-2025-48534
In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48531
In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48534
In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48534
CVE-2025-48534 affects Android’s CellBroadcast handling code. In getDefaultCBRPackageName of CellBroadcastHandler.java, a logic error may allow privilege escalation, yielding local denial of service with System execution privileges and no user interaction required. Current connected sources confi...
CVE-2025-48531
In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Malicious code in monolith-twirp-merge-queue-go-mergequeueservice (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e907c6e8d9b369e32e165c27d2a66931e8ecbb4b256a932542731234e6cf8da The OpenSSF Package Analysis project identified 'monolith-twirp-merge-queue-go-mergequeueservice' @ 1.0.2 rubygems as malicious. It is considere...
MAL-2025-42129 Malicious code in pp-react-grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71193da54e6cdc258489d02db5987830a3bc147cbf9b43236f5757cab04f9c73 The OpenSSF Package Analysis project identified 'pp-react-grid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41506 Malicious code in @twork-data-services/proxy-invest-api-v1-futures-info-single (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41469 Malicious code in @twork-data-services/checking-account-option-statuses (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41467 Malicious code in @twork-data-services/cashout-tier-settings (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41653 Malicious code in ctf-q21-empire-tmp-t0pw1ns (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-42122 Malicious code in @flight-common/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10b5cb816f030297707c6e9ae79f7916de698fd58c8b068b18ef716c7425240b The OpenSSF Package Analysis project identified '@flight-common/components' @ 1.2.9213 npm as malicious. It is considered malicious because: - T...
MAL-2025-41911 Malicious code in @espace-client-axafr/user-profile-acceptance (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @espace-client-axafr/sticker-policy-list (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41908 Malicious code in @espace-client-axafr/tchat-ecco (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41880 Malicious code in @espace-client-axafr/popin-arkea (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41867 Malicious code in @espace-client-axafr/lme (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41868 Malicious code in @espace-client-axafr/mes-documents-contrat (npm)
The package communicates with a domain associated with malicious activity...