Wallpaper 安全漏洞

Wallpaper is a wallpaper application from Wallpaper Inc. A security vulnerability exists in Wallpaper version 12 that stems from allowing an unauthorized application to actively request permission to modify data in the database...

[SECURITY] [DLA 3417-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3417-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 11, 2023 https://wiki.debian.org/LTS -...

CVE-2021-0434

In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional...

PT-2021-13017 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-8.1 through Android-11 Description: The issue is related to a possible permissions bypass due to a mutable PendingIntent in the onReceive of BluetoothPermissionRequest.java. This could lead to local escalation of...

Cross site request forgery (csrf)

Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...

CVE-2020-10858

Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...

CVE-2019-5778

CVE-2019-5778 affects Google Chrome/Chromium extensions. The available description states a missing case in handling special schemes during permission request checks in Extensions, allowing bypass of extension permission checks for privileged pages via a crafted Chrome Extension (pre 72.0.3626.81...

Design/Logic Flaw

Android 1.5 CRBxx allows local users to bypass the 1 Manifest.permission.CAMERA aka android.permission.CAMERA and 2 Manifest.permission.AUDIORECORD aka android.permission.RECORDAUDIO configuration settings by installing and executing an application that does not make a permission request before...