Mail.ru: Mail.Ru Email for Android: Injecting custom screen inside adding new account flow

Intent was implicitely invoked on account refistration in Mail.ru Mail application for Android, allowing screen content spoofing via local application...

New Flaw Lets Rogue Android Apps Access Camera Without Permission

An alarming security vulnerability has been discovered in several models of Android smartphones manufactured by Google, Samsung, and others that could allow malicious apps to secretly take pictures and record videos — even when they don't have specific device permissions to do so. You must alread...

CVE-2019-15344

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...

Input validation

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.1.13. This app contains an exported service name...

Authentication flaw

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213: Improper Authentication

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

Eset Mobile Security 5.2.18.0 Lock Bypass

Exploit Title: Bypassing Eset Mobile Security App Using Android's Split-Screen Feature Date: 11.11.2019 Exploit Author: Ferhat Cil linkedin:ferhatcil Vendor Homepage: Eset Version: 5.2.18.0 Tested on: Android 9.1.0.142, Android 8.1.0 Security App let's you lock your apps on your phone, but if you...

CVE-2019-17222: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Intelbras WRN 150 1.0.17 devices. There is stored XSS in the Service Name tab of the WAN configuration screen, leading to a denial of service inability to change the configuration...

chromium-browser: Notification obscured

Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page...

chromium-browser: Notification obscured

Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page...

RHEL 8 : GNOME (RHSA-2019:3553)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3553 advisory. GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fixes: evince: uninitialized memory use in function...

gnome-shell: partial lock screen bypass

A vulnerability was found where the gnome-shell lock screen, since version 3.15.91, does not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts and potentially other actions. This vulnerability was fixed in...

CVE-2016-1000002

gdm3 3.14.2 and possibly later has an information leak before screen lock...

DEBIAN-CVE-2016-1000002

gdm3 3.14.2 and possibly later has an information leak before screen lock...

CVE-2016-1000002

gdm3 3.14.2 and possibly later has an information leak before screen lock...

UBUNTU-CVE-2016-1000002

gdm3 3.14.2 and possibly later has an information leak before screen lock...

CVE-2016-1000002

gdm3 3.14.2 and possibly later has an information leak before screen lock...

CVE-2016-1000002

gdm3 3.14.2 and possibly later has an information leak before screen lock...

CVE-2016-1000002

CVE-2016-1000002 concerns gdm3 3.14.2 and possibly later, with an information leak before screen lock. The connected documents consistently identify this as a information disclosure vulnerability affecting the GDM display manager, leading to partial confidentiality impact. The exact affected vers...