Astra Linux – Vulnerability in Chromium

Insecure security user interfaces in payment-related functions of Google Chrome on Android before version 91.0.4472.77 allowed a remote attacker to perform domain spoofing through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

Astra Linux – Vulnerability in FLAC

In FLACbitreaderreadricesignedblock of bitreader.c, there is a potential out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure without requiring additional execution privileges. User interaction is required for exploitation. Product: Android. Versions:...

Astra Linux – Vulnerability in Chromium

In versions of Google Chrome on Android prior to 101.0.4951.41, the security interface in the Downloads section allowed a remote attacker to spoof the APK download dialog box through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the “File” feature in Google Chrome on Android prior to version 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from internal file directories via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow vulnerability existed in the Downloads feature of Google Chrome on Android, prior to version 104.0.5112.101. This vulnerability allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to version 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In binder.c, there is a potential way to corrupt memory due to a use after free. This could lead to a local escalation of privileges without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android Versions: Android kernel Android ID:...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in gdisk

In the ReadLogicalParts function of basicmbr.cc, there is a potential out-of-bounds write vulnerability due to a missing bounds check. This could lead to a local privilege escalation without the need for additional execution privileges. User interaction is not required for exploitation. Product:...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 111. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Andro...

Astra Linux – Vulnerability in gdisk

In the LoadPartitionTable function of gpt.cc, there is a potential out-of-bounds write vulnerability due to a missing bounds check. This could lead to a local escalation of privileges when inserting a malicious USB device, without the need for additional execution privileges. User interaction is...

CVE-2026-85125

The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites...

EUVD-2026-77253

The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites...

CVE-2026-85125

The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites...

CVE-2026-85125

The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites...

CVE-2026-85125

YAMAP -Social Trekking GPS App for Android contains an improper access control vulnerability in its WebView (in-app browser) implementation. The flaw may allow information leakage from the app or redirect users to unintended websites . The CVSS 3.0 score is 5.4 (MEDIUM) , requiring user interacti...

"YAMAP -Social Trekking GPS App" vulnerable to improper access control

Overview Android application "YAMAP -Social Trekking GPS App" provided by YAMAP INC. contains the following vulnerability: Improper Verification of Source of a Communication Channel CWE-940 - CVE-2026-85125 Koki Sato of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC...

AndroidPhantom

👻 ANDROID PHANTOM 🏴‍☠️ The Next-Gen Android Pentesting Fr...

EUVD-2025-210901

A Cross-Site Scripting XSS vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field...