11708 matches found
CVE-2026-26897-EcoOnline-DeepLink
EcoOnline EHS Android β Deep Link Validation Bypass β WebView Open Redirect CVE-2026-26897 Public disclosure / advisory for CVE-2026-26897 , a deep link validation bypass in the EcoOnline EHS Android application com.airsweb.v10. A crafted ehs-app:// deep link is rewritten to https:// and loaded...
qark
Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...
CVE-2026-0628-POC
CVE-2026-0628-POC Proof of Concept PoC for CVE-2026-0628, demonstrating script injection into privileged pages through the use of the tag in Google Chrome. This vulnerability, classified as CWE-862 Missing Authorization, allows a malicious extension to bypass security policies in versions prior t...
Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation
= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X README.md CVE-2026-0628: Chromium WebView Privilege Escalation Origin Spoofing β Technical Research & Proof-of-Concept Author: Sastra Adi Wiguna Purple Elite Teaming Research Date: January 2026 CVE ID: CVE-2026-0628 CVSS v3.1: 8.8...
AndroidWebviewInjectDemo
AndroidWebviewInjectDemo An app demo for test android webview security issue: CVE-2012-6636...
CVE-2026-12254
The Netskope Client (NSClient) is vulnerable to a WebView Persistence issue in all versions prior to R142 . When a system connects to an access point with a Captive Portal and subsequently switches to a network with existing internet connectivity, the Captive Portal fails to close. This gap allow...
CVE-2026-12254 Netskope Client Captive Portal WebView Persistence allowing SWG bypass issue
Netskope is notified about a potential gap in its agent NSClient where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via t...
CVE-2024-25291
DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerability. deskfiler - 1.2.3 allows Electron webview in application, with resultant remote code In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file that...
CVE-2024-25292
RenderTune RCE A Proof-Of-Concept for CVE-2024-25292 vulnerability. A cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter. In this repository there is an example...
deep-C
Deep-C Deep-C is an Android Deep Link Exploitation Framework that automatically decompiles APKs, identifies exposed and insecure deep link entry points, validates exploitability using static analysis and optional AI verification , and generates executable adb Proof-of-Concepts PoCs. Deep-C is...
apk-interceptor
apk-interceptor Android deeplink, Intent, and WebView bridge assessment helper apk-interceptor is a portable Android testing APK for authorized application security assessments. It helps security engineers verify how an Android app handles external entry points such as custom URI schemes,...
CVE-2020-1054
CVE-2020-1054 CVE-2020-1054 Learning Screenshot ζζεΎ Reference https://0xeb-bp.github.io/blog/2020/06/15/cve-2020-1054-analysis.html steal Security token https://github.com/mwrlabs/CVE-2016-7255 leak function https://github.com/DreamoneOnly/CVE-2019-0808-32-64-exp...
A Hybrid Information Flow Analysis Framework for Android Hybrid Apps
The WebView interface in Android hybrid applications enables the native side e.g., Java to exchange data with the Web e.g., JavaScript. This creates cross-language information flow channels that existing single-language analyzers cannot analyze. Existing hybrid app analyses address only part of t...
Gu3ssWeak
Gu3ssWeak A deliberately vulnerable Android application for mobile security research, bug bounty practice, and CTF-style learning. Contains 21 documented vulnerabilities mapped to the OWASP Mobile Top 10. Quick Start git clone [email protected]:b4sith-sec/Gu3ssWeak.git cd Gu3ssWeak ./gradlew...
CVE-2024-22891
Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerability. nteract 0.28.0 allows Electron webview via Markdown link, with resultant remote code execution. In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file th...
CVE-2023-41898_Lab
CVE-2023-41898 Unvalidated Deep Link Lab This is an educational, reduced-scope reproduction Lab built based on the public vulnerability report GHSL-2023-142 for Home Assistant Companion for Android and the open-source structure of the vulnerable version 2023.8.2. It does not use a real Home...
the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss
CVE-2026-78997 β UC Browser for Android Universal XSS UXSS PoC material for CVE-2026-78997 β Universal Cross-Site Scripting in UC Browser for Android com.UCMobile.intl, version 13.7.8.1314, disclosed by Omri Inbar Novee. A reflected XSS on the bridge-whitelisted domain mtmsg.uc.cn grants access t...
CVE-2013-4710-WebView-RCE-Vulnerability
CVE-2013-4710-WebView-RCE-Vulnerability Vulnerability Description A lot of the time we use WebView to display a Webpage,for example many applications in order to achieve the server control, many results page is Webpage, rather than the local implementation, which has many advantages, such as...
CVE-2026-54702
Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...
CVE-2026-54702
The Markdown Preview Enhanced extension for Visual Studio Code is vulnerable to Blind Command Dispatch in versions prior to 0.8.30 . The webview message handler in src/preview-provider.ts fails to perform allowlist or type validation on attacker-controlled command values and arguments within the ...