31752 matches found
CVE-2025-26430
CVE-2025-26430 affects SpaAppBridgeActivity (Android). A logic error in getDestinationForApp may allow cross-user file reveal, enabling local elevation of privilege with no extra privileges and no user interaction. Documents indicate this CVE is addressed in Android security bulletins with 2025-0...
CVE-2025-26429
In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26429
CVE-2025-26429 is an Android vulnerability where the collectOps path in AppOpsService.java allows a local DoS due to improper input validation. Exploitation is local with no user interaction and no extra privileges required. The connected advisories reference Android security bulletins and vendor...
CVE-2025-0087
In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper validation of user input in the dataAppReportCodeid and dataAppReportCodename parameters within the /apprain/appreport/manage/ process. An attacker can execute arbitrary scripts in the context of a...
Security Bulletin: The IBM Engineering Test Management product using WebSphere Application Server is affected by a denial of service with glassfish jsonp (CVE-2025-36097)
Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service. This affects WebSphere Liberty with the jsonp-1.0, jsonp-1.1, or jsonp-2.0 features enabled. It has been addressed in this bulletin. Vulnerability Details Refer to the security...
PT-2025-36031
Name of the Vulnerable Software and Affected Versions: Launcher app affected versions not specified Description: A logic error in the code of the Launcher app may allow an attacker to hijack the application, potentially leading to local escalation of privilege. Exploitation does not require user...
PT-2025-35902
Name of the Vulnerable Software and Affected Versions GoodLock versions prior to 2.2.04.95 Description An improper component export in GoodLock allows local attackers to install arbitrary applications from the Galaxy Store. Recommendations Update GoodLock to version 2.2.04.95 or later...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a way to bypass intent security checks due to proxy obfuscation in multiple functions in AppRestrictions Fragment.java. An attacker can...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges due to a logic error in the executeAppFunction function in AppSearchManagerService.java that...
PT-2025-36069
Name of the Vulnerable Software and Affected Versions: AppOpsControllerImpl.java affected versions not specified Description: A race condition exists in multiple functions within AppOpsControllerImpl.java, potentially allowing audio recording without displaying the appropriate privacy indicator...
PT-2025-36078
Name of the Vulnerable Software and Affected Versions: AppOpsService.java affected versions not specified Description: The software contains a flaw in multiple functions of AppOpsService.java due to improper input validation. This can allow an attacker to add a large amount of app ops, potentiall...
Markdownify 命令注入漏洞
Markdownify is a minimal Markdown Editor desktop application built on Electron by the individual developer Amit Merchant. A command injection vulnerability exists in Markdownify versions prior to 0.0.2, which stems from a failure to clean up input parameters resulting in command injection that...
PT-2025-36011
Name of the Vulnerable Software and Affected Versions: AppOpsService.java affected versions not specified Description: The collectOps function in AppOpsService.java is susceptible to a denial-of-service condition due to inadequate input validation. This can result in a local denial of service...
PT-2025-36014
Name of the Vulnerable Software and Affected Versions: ContentProtectionTogglePreferenceController.java affected versions not specified Description: A logic error in the updateState function within ContentProtectionTogglePreferenceController.java may allow a secondary user to disable the deceptiv...
PT-2025-36044
Name of the Vulnerable Software and Affected Versions: ContentProtectionTogglePreferenceController.java affected versions not specified Description: A logic error in the updateState function within ContentProtectionTogglePreferenceController.java may allow a secondary user to disable the deceptiv...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from the American company Google. Google Android suffers from a security vulnerability that stems from a logic error that could cause the system to incorrectly restore the default helper app and local elevation of privilege...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the updateState function in ContentProtectionTogglePreferenceController.java, which can be exploited by an attacker to elevate...
PT-2025-36077
Name of the Vulnerable Software and Affected Versions: BatteryService.java affected versions not specified Description: Multiple functions within BatteryService.java are susceptible to implicit intent hijacking, potentially allowing an attacker to redirect intents intended for a system applicatio...
