CVE-2024-0245

A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a...

CVE-2024-0245

CVE-2024-0245 affects the Inure app (hamza417/inure) prior to build97. The root cause is a misconfiguration in AndroidManifest.xml, enabling task hijacking where a malicious app can inherit permissions and potentially access sensitive data when installed on the victim’s device. Impact is describe...

XML External Entity (XXE)

jadx-core is vulnerable to xml external entity attacks. The vulnerability exists in the parseXml function of ExportGradleProject.java as it does not set disallow-doctype-decl attribute in the DocumentBuilderFactory, allowing an attacker to export a malicious android application with a crafted...