cve-2020-0022

cve-2020-0022 poc para cve-2020-0022 uso gcc poc.c -lbluetooth -o poc poc MACADDR información Este poc debería ser estable en android 8.1.0, una vez que entra en el truncamiento de paquetes, se bloquea. Pero puede ser muy inestable, en Samsung s9 plus seguramente inestable. Ejecutar poc en...

Samsung Galaxy A57 Android 16 sgpu Driver Use-After-Free

Samsung Galaxy A57 devices running Android version 16 contain a use-after-free race in the sgpu driver’s sgpugemcreate function. The proof of concept races GEM creation and close ioctls to trigger BO swap-list corruption. Samsung sgpu: sgpugemcreate calls sgpuswapaddbo on dangling BO...

CVE-2026-92862: Improper Authorization in Handler for Custom URL Scheme

The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted Intent...

PT-2026-107786

The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application...

PT-2026-113547

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.7 alpha3 through 2.7.7 Description An integer underflow occurs on Windows and Android platforms. This issue allows remote authenticated servers to trigger a denial of service or memory disclosure by using crafted domain sear...

CVE-2026-101886

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

CVE-2026-101886

Cisco Jabber for Android (com.cisco.im) versions prior to 15.3.1.311364 are vulnerable to a path traversal vulnerability. The flaw exists because the exported crosslaunch.share activity uses an unsanitized display name from a ContentProvider during file path construction. A malicious application ...

CVE-2026-101886 Cisco Jabber for Android Path Traversal via Shared Content URI

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

EUVD-2026-94456

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

vulnerabilities in Google Android

Google has identified vulnerabilities in Android. Samsung has addressed the vulnerabilities relevant to Samsung Mobile devices in their products. These vulnerabilities include incorrect bounds checking, missing permission checks, integer overflows, improperly initialized pointers, type confusion,...

CVE-2025-70521

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

CVE-2025-70518

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

Google issues Android security updates: who can get them and how

Google has published security fixes for Android. The October updates are available for Android operating system versions 14, 15, 16, 16-qpr2, and 17 where “qpr” stands for Quarterly Platform Release. QPRs are interim updates Google pushes out between major yearly cycles. These Android security...

ROOT-APP-MAVEN-GHSA-7CJH-XX4R-QH3F GHSA-7cjh-xx4r-qh3f in io.sentry:sentry-android - Patched by Root

Root has patched GHSA-7cjh-xx4r-qh3f in the io.sentry:sentry-android package for Root:Maven. Multiple fixed versions available...

Exploit for Use After Free in Google Android

cve-2019-2215-oppo-a77t Utilizes CVE-2019-2215 Binder UAF...

Linux Distros Unpatched Vulnerability : CVE-2026-106338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML...

CVE-2025-70518

The Fanvil x7a device, running firmware version 2.6.0.1182 , contains a command injection vulnerability in the management portal's diagnostic ping tool . Due to insecure handling of user-supplied input, an unauthenticated attacker can inject commands to execute arbitrary code on the underlying An...

CVE-2025-70518

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

CVE-2025-70521

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

CVE-2025-70518: Improper Neutralization of Special Elements used in a Command

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...