EUVD-2020-3274

Malware in sbrugna...

EUVD-2016-10266

Malware in sbrugna...

EUVD-2012-0677

Malware in sbrugna...

EUVD-2019-11767

Malware in sbrugna...

EUVD-2023-38265

Malicious code in bioql PyPI...

EUVD-2023-12322

Malicious code in bioql PyPI...

EUVD-2022-47495

Malicious code in bioql PyPI...

ASB-A-383131643

In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-331730488

In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...

CVE-2021-41848

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates such that local third-party apps can provide a spoofed software update file that contains an arbitrary shell script and arbitrary ARM binary, where both will be executed as the root user with an...

Severe Android and Novi Survey Vulnerabilities Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added two vulnerabilities to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The two flaws are listed below - CVE-2023-20963 CVSS score: 7.8 - Android Framework Privilege Escalation...

Hardcoded credentials

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates such that local third-party apps can provide a spoofed software update file that contains an arbitrary shell script and arbitrary ARM binary, where both will be executed as the root user with an...

The vulnerability of the Android operating system’s adb module allows a hacker to increase their privileges.

The vulnerability of the Android operating system’s adb module is related to incorrect handling of the socket shutdown operation. Exploiting this vulnerability allows a remote attacker to enhance their privileges through a specially created application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm operating system’s cryptographic driver in Android is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code within the operating system’s kernel using a special application...