CVE-2023-26311

Technical details about CVE-2023-26311 are not publicly available in the provided documents. Monitor for updates from vendors or advisories to obtain affected versions, remediation, and exploit information.

CVE-2023-26309

A remote code execution vulnerability in the webview component of OnePlus Store app...

CVE-2023-26309

A remote code execution vulnerability in the webview component of OnePlus Store app...

Remote code execution

A remote code execution vulnerability in the webview component of OnePlus Store app...

CVE-2023-26309 A remote code execution vulnerability in the webview component

A remote code execution vulnerability in the webview component of OnePlus Store app...

CVE-2023-26309 A remote code execution vulnerability in the webview component

A remote code execution vulnerability in the webview component of OnePlus Store app...

CVE-2023-26309

CVE-2023-26309 describes a remote code execution in the webview component of the OnePlus Store app. Affected: OnePlus Store app webview. Vulnerability type and root cause are not detailed beyond generic RCE in webview; impact is high (C/H/I/A: HIGH per NVD; CVSS v3.1 scores show 9.8 base in NVD w...

CVE-2023-30705

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission...

CVE-2023-30705

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission...

CVE-2023-30705

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission...

CVE-2023-30705

CVE-2023-30705 relates to the Samsung Galaxy Store prior to 4.5.56.6, where improper sanitization of incoming intents enables a local attacker to access privileged content providers using Galaxy Store permissions. Affected software: Galaxy Store versions before 4.5.56.6. Root cause: inadequate fi...

CVE-2023-30705

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission...

CVE-2023-30705: Incorrect Authorization

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission...

CVE-2023-26309: Undefined Security Weakness

A remote code execution vulnerability in the webview component of OnePlus Store app...

CVE-2023-26311: Undefined Security Weakness

A remote code execution vulnerability in the webview component of OPPO Store app...

Store Locator WordPress < 1.4.13 - Reflected XSS

Description The plugin does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open the URL below...

Store Locator WordPress < 1.4.13 - Reflected XSS

Description The plugin does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC Make a logged in admin open the URL below...

PT-2023-20605

Name of the Vulnerable Software and Affected Versions OPPO Store app affected versions not specified Description A remote code execution vulnerability exists in the webview component of the OPPO Store app. This issue allows for remote code execution. Recommendations At the moment, there is no...

PT-2023-20602

Name of the Vulnerable Software and Affected Versions OnePlus Store app affected versions not specified OnePlus Mall app affected versions not specified Description A remote code execution vulnerability exists in the webview component of the OnePlus Store and Mall apps. This issue allows for remo...

PT-2023-22905 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.56.6 Description: The issue is related to improper sanitization of incoming intent in Galaxy Store, allowing local attackers to access privileged content providers as Galaxy Store permission. Recommendations...