Lucene search
+L

65 matches found

Vulnrichment
Vulnrichment
added 2025/08/22 12:0 a.m.5 views

CVE-2025-55622

Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience...

6.7AI score0.00338EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/08/22 12:0 a.m.20 views

CVE-2025-55622

Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience...

0.00338EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:32 a.m.11 views

CVE-2022-4457

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS6.5AI score0.00167EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:52 p.m.15 views

CVE-2021-43190

In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...

5.3CVSS7AI score0.00685EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/03/22 12:49 p.m.11 views

CVE-2024-0245

A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a...

5.5CVSS6.4AI score0.00184EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/20 10:15 a.m.9 views

CVE-2024-0245

A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a...

5.5CVSS0.00184EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/20 10:10 a.m.25 views

CVE-2024-0245 Task Hijacking in hamza417/inure

A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a...

5.5CVSS0.00184EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/20 10:10 a.m.8 views

CVE-2024-0245 Task Hijacking in hamza417/inure

A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a...

5.5CVSS5.3AI score0.00184EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/20 10:10 a.m.54 views

CVE-2024-0245

CVE-2024-0245 affects the Inure app (hamza417/inure) prior to build97. The root cause is a misconfiguration in AndroidManifest.xml, enabling task hijacking where a malicious app can inherit permissions and potentially access sensitive data when installed on the victim’s device. Impact is describe...

5.5CVSS5.3AI score0.00184EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/20 10:10 a.m.11 views

CVE-2024-0245 Task Hijacking in hamza417/inure

A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a...

5.5CVSS6.2AI score
SaveExploits0References4
CNNVD
CNNVD
added 2025/03/20 12:0 a.m.7 views

Inure 信息泄露漏洞

Inure is an Android application manager by the individual developer Hamza Rizwan. An information disclosure vulnerability exists in versions prior to Inure build97, which stems from a misconfiguration of the AndroidManifest.xml file and could lead to task hijacking and disclosure of sensitive...

5.5CVSS5.1AI score0.00184EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/01 12:0 a.m.36 views

ASB-A-293301736

In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

9.8CVSS7.8AI score0.00343EPSS
SaveExploits0References2
Huntr
Huntr
added 2023/08/20 7:39 p.m.91 views

Android Manifest Misconfiguration Leading to Task Hijacking

Description Task hijacking allows malicious apps to inherit permissions of vulnerable apps and is usually used for phishing login credentials of victims. This vulnerability applies to all Android versions before Android 11. Steps To Reproduce: 1. Victim installs malicious app 1. Victim starts...

5CVSS7AI score0.00399EPSS
SaveExploits0References1
F5 Networks
F5 Networks
added 2023/02/21 6:33 p.m.55 views

K40019131: F5 Access for Android vulnerability CVE-2022-27875

Security Advisory Description A Task Hijacking vulnerability exists in the F5 Access for Android application, which may allow an attacker to steal sensitive user information. CVE-2022-27875 Impact An attacker may be able to exploit this vulnerability by tricking a legitimate user running Android...

5.5CVSS5.5AI score0.00608EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2023/01/11 5:15 p.m.25 views

CVE-2022-4457

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS5.3AI score0.00167EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/11 5:15 p.m.9 views

CVE-2022-4457

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS5.8AI score0.00167EPSS
SaveExploits0References1
Prion
Prion
added 2023/01/11 5:15 p.m.29 views

Design/Logic Flaw

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

1.9CVSS5.3AI score0.00167EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2023/01/11 4:32 p.m.56 views

CVE-2022-4457

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS5.4AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/01/11 4:32 p.m.31 views

CVE-2022-4457 WARP client manifest misconfiguration leading to Task Hijacking

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS5.5AI score0.00167EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/01/11 4:32 p.m.15 views

CVE-2022-4457 WARP client manifest misconfiguration leading to Task Hijacking

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS6.4AI score0.00167EPSS
SaveExploits0References1
Rows per page
Query Builder