PT-2025-4187 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR Feb-2025 Release 1 Description: The issue concerns an improper export of Android application components in Settings, allowing local attackers to enable ADB. This could potentially be exploited by attackers with...

Cross site scripting

Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings+company.php, settingsdefaults.php,settingsintegrations.php,...

PT-2024-20894 · Unknown · Itflow.Org

Name of the Vulnerable Software and Affected Versions: ITFlow.org versions prior to commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the settings.php,...

CVE-2024-25344

Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings+company.php, settingsdefaults.php,settingsintegrations.php,...