Quick Reboot Security Vulnerability

Quick Reboot is an application for Android. A security vulnerability exists in Quick Reboot version 1.0.8, which stems from a lack of input validation and leaves the receiver vulnerable to unauthorized broadcasts...

CVE-2024-23388

Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

Syrian Hackers Distributing Stealthy C#-Based Silver RAT to Cybercriminals

Threat actors operating under the name Anonymous Arabic have released a remote access trojan RAT called Silver RAT that's equipped to bypass security software and stealthily launch hidden applications. "The developers operate on multiple hacker forums and social media platforms, showcasing an...

Design/Logic Flaw

Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects Android versions of Firefox and Firefox Focus. This vulnerability affects Firefox 121...

PT-2023-28870 · Zoom · Zoom Mobile App For Android +3

Name of the Vulnerable Software and Affected Versions: Zoom Mobile App for Android versions prior to 5.16.0 Zoom Mobile App for iOS versions prior to 5.16.0 Zoom SDKs for Android versions prior to 5.16.0 Zoom SDKs for iOS versions prior to 5.16.0 Description: The issue is related to cryptographic...

PT-2023-27231 · Google · Android

Name of the Vulnerable Software and Affected Versions: MyCrops HiGrade "THC Testing & Cannabi" application version 1.0.337 Description: An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application for Android, where a remote attacker can start the camera feed via the...

CVE-2023-36351

An issue in Viatom Health ViHealth for Android v.2.74.58 and before allows a remote attacker to execute arbitrary code via the com.viatom.baselib.mvvm.webWebViewActivity component...

CVE-2023-21173

In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

PT-2023-17972 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a logic error in the code of CarrierPrivilegesTracker.java, specifically in the getCurrentPrivilegedPackagesForAllUsers function. This error can lead to a permission bypass,...

PT-2023-17979 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: In the fixNotification function of NotificationManagerService.java, a logic error in the code can lead to a bypass of notification hide preference. This issue could result in local escalation of privile...

PT-2023-17975 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the btm ble update inq result function of btm ble gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution...

PT-2023-17957 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the inviteInternal function of p2p iface.cpp due to a missing bounds check. This could lead to local information disclosure, requiring System...

PT-2023-17976 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version 13 Description: A logic error in the LockTaskController.java code allows for a possible bypass of lock task mode. This could lead to local escalation of privilege with no additional execution privileges needed, requiring user...

PT-2023-17984 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btm ble batchscan filter track adv vse cback function of btm ble batchscan.cc due to a missing bounds check. This could lead to local...

PT-2023-17998 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to unsafe deserialization in multiple functions of sta iface.cpp, which could lead to a possible out of bounds read. This could result in local escalation of privilege, wi...

CVE-2023-21130

In btmbleperiodicadvsynclost of btmblegap.cc, there is a possible remote code execution due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID...

CVE-2023-21105

In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

PT-2023-22396 · Unknown · The Thaiger

Name of the Vulnerable Software and Affected Versions: The Thaiger version 1.2 Description: An issue in The Thaiger for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files. Recommendations: For The Thaiger version 1.2, consider restricting...

CVE-2023-29544

If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...

PT-2023-22377 · Unknown · Bt21 X Bts Wallpaper

Name of the Vulnerable Software and Affected Versions: BT21 x BTS Wallpaper app version 12 for Android Description: The issue allows unauthorized applications to request permission to insert data into the database that records user personal preferences. This data is loaded into memory when the...