CVE-2023-29755

The CVE-2023-29755 entry concerns Twilight v13.3 on Android. It describes a local privilege-escalation vulnerability where untrusted apps can manipulate the app’s SharedPreference files to gain privileges. Documented impact is high (CVE CVSS 3.1: Local attack, no privileges required, user interac...

CVE-2023-29755: Insecure Storage of Sensitive Information

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...

PT-2023-3749 · Yandex · Yandex Navigator

Name of the Vulnerable Software and Affected Versions: Yandex Navigator version 6.60 Description: The issue in Yandex Navigator is related to errors in resource release, specifically concerning the SharedPreference File Handler component. This allows an attacker to cause a denial of service. The...

CVE-2023-29746

An issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files...

Code injection

An issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files...

CVE-2023-29746

An issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files...

Thaiger 安全漏洞

Thaiger is a news application from Thaiger Thailand. A security vulnerability exists in Thaiger version 1.2 that originates from allowing unauthorized applications to cause a code execution attack by manipulating the SharedPreference file...

CVE-2023-29746: Undefined Security Weakness

An issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files...

CVE-2023-29746

The Thaiger for Android v1.2 is affected. The issue stems from unauthorized apps manipulating SharedPreference files to trigger code execution. Impact is high (code execution with total impact) per linked CVE records. Remediation details are not uniform across documents; PT-2023-22396 suggests re...

CVE-2023-29746

An issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files...

CVE-2023-29748

Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the...

Denial of service

Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the...

CVE-2023-29748

Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the...

CVE-2023-29748

CVE-2023-29748 affects Story Saver for Instagram – Video Downloader (Android, v1.0.6). An exposed component lets an attacker modify SharedPreferences, enabling injection of large data into a file that is loaded into memory on app start. This can trigger an OutOfMemoryError and crash at startup, p...

CVE-2023-29748: Undefined Security Weakness

Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the...

CVE-2023-29748

Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the...

CVE-2023-29747

Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the...

Code injection

Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the...

CVE-2023-29747: Undefined Security Weakness

Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the...

CVE-2023-29747

Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the...