11524 matches found
EUVD-2026-91030
The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default...
EUVD-2026-91025
Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker could access the clipboard, make arbitrary HTTP requests via the Weex 'stream' module, or access app-internal storage. If the installed a...
CVE-2026-103922
Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...
EUVD-2026-90973
Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...
AndroidWebviewInjectDemo
AndroidWebviewInjectDemo Android webview 보안 취약점CVE-2012-6636 테스트용 앱 데모...
deep-C
Deep-C Deep-C 는 Android 딥 링크 익스플로잇 프레임워크 로, APK를 자동으로 디컴파일하고, 노출되거나 안전하지 않은 딥 링크 진입점을 식별하며, 정적 분석 및 선택적 AI 검증 을 통해 익스플로잇 가능성을 검증하고, 실행 가능한 adb PoCProof-of-Concept 을 생성합니다. Deep-C는 모바일 애플리케이션 침투 테스트 , 레드 팀 평가 , Android 보안 연구 를 위해 설계되었으며, 잡음이 많은 결과보다 실제 익스플로잇 가능성 에 중점을 둡니다. WebdeepC -웹 버전 CLI ✨ 특징 ...
qark
Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...
Chromium CVE-2026-87640: Out of bounds read in WebView
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2020-1054
CVE-2020-1054 CVE-2020-1054 학습 Screenshot Reference https://0xeb-bp.github.io/blog/2020/06/15/cve-2020-1054-analysis.html 보안 토큰 탈취 https://github.com/mwrlabs/CVE-2016-7255 함수 유출 https://github.com/DreamoneOnly/CVE-2019-0808-32-64-exp...
CVE-2026-101883
OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation enforced by canvas.navigate. Attackers with gateway or agent access can issue canvas.present to make the node's WebView send requests to...
CVE-2024-25292
RenderTune RCE CVE-2024-25292 취약점에 대한 개념 증명PoC입니다. RenderTune v1.1.4의 XSS교차 사이트 스크립팅 취약점으로 인해 공격자가 Upload Title 매개변수에 조작된 페이로드를 주입하여 임의의 웹 스크립트나 HTML을 실행할 수 있습니다. 이 저장소에는 취약한 애플리케이션 예제와 이에 대한 개념 증명PoC 익스플로잇이 포함되어 있습니다. PoC로는 프로세스를 자동화하는 Python 파일이 있습니다. 1. 취약점 개요: XSS를 통해 RCE를 가능하게 하는 취약점입니다. 제목에...
CVE-2026-101883 OpenClaw Windows Node through 2026.9.4 SSRF via canvas.present
OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation enforced by canvas.navigate. Attackers with gateway or agent access can issue canvas.present to make the node's WebView send requests to...
CVE-2026-101883
The OpenClaw Windows Node versions through 2026.9.4 are vulnerable to a Server-Side Request Forgery (SSRF) flaw within the canvas.present capability. The root cause is that canvas.present allows for the bypass of URL risk evaluations normally enforced by canvas.navigate . An attacker possessing g...
EUVD-2026-90256
OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation enforced by canvas.navigate. Attackers with gateway or agent access can issue canvas.present to make the node's WebView send requests to...
CVE-2026-102327
An incorrect authorization flaw was found in the WebView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496212975 https://code.google.com/p/chromium/issues/detail?id=102327...
CVE-2026-102327
Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-102327
Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-102327
Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-89401
Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-102327
Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...