Design/Logic Flaw

An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause a denial of service attack by manipulating the database...

CVE-2023-29733

The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a seve...

CVE-2023-29734

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...

CVE-2023-29733

The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a seve...

Privilege escalation

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...

Design/Logic Flaw

The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a seve...

Sneaky DogeRAT Trojan Poses as Popular Apps, Targets Indian Android Users

A new open source remote access trojan RAT called DogeRAT targets Android users primarily located in India as part of a sophisticated malware campaign. The malware is distributed via social media and messaging platforms under the guise of legitimate applications like Opera Mini, OpenAI ChatGPT, a...

Sneaky DogeRAT Trojan Poses as Popular Apps, Targets Indian Android Users

A new open source remote access trojan RAT called DogeRAT targets Android users primarily located in India as part of a sophisticated malware campaign. The malware is distributed via social media and messaging platforms under the guise of legitimate applications like Opera Mini, OpenAI ChatGPT, a...

Hardcoded credentials

ToUI is a Python package for creating user interfaces websites and desktop apps from HTML. ToUI is using Flask-Caching SimpleCache to store user variables. Websites that use Website.uservars property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1...

CVE-2023-33175 ToUI allows user-specific variables to be shared between users

ToUI is a Python package for creating user interfaces websites and desktop apps from HTML. ToUI is using Flask-Caching SimpleCache to store user variables. Websites that use Website.uservars property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1...

CVE-2023-33175

ToUI is affected by CVE-2023-33175 due to improper handling of the Website.user_vars attribute when using Flask-Caching (SimpleCache). The root cause is that user-specific variables are stored on the server-side cache, allowing exposure across users. Affected versions are 2.0.1 through 2.4.0; the...

PT-2023-22385 · Unknown · Edjing Mix

Name of the Vulnerable Software and Affected Versions: edjing Mix version 7.09.01 Description: The issue allows unauthorized apps to cause escalation of privilege attacks by manipulating the database. Recommendations: For edjing Mix version 7.09.01, at the moment, there is no information about a...

CVE-2023-29734

CVE-2023-29734 affects edjing Mix for Android (v7.09.01). The issue allows unauthorized apps to escalate privileges by manipulating the app’s database. Documented impact is high (privilege escalation; potential confidentiality, integrity, and availability effects) with CVSS v3.1 base score 9.8. N...

CVE-2023-29745

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database...

CVE-2023-29740

The CVE-2023-29740 entry concerns Alarm Clock for Heavy Sleepers v5.3.2 on Android. The issue enables unauthorized apps to cause a denial-of-service by manipulating the app’s database, leading to availability impact. Documented sources consistently identify the affected software and the root caus...

PT-2023-22394 · Unknown · Bestweather

Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: The issue allows unauthorized apps to cause a persistent denial of service attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, at the moment, there is no information abou...

CVE-2023-29742

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulating the database...

PT-2023-22384 · Unknown · Lock Master

Name of the Vulnerable Software and Affected Versions: The Lock Master app version 2.2.4 Description: The issue allows unauthorized apps to modify the values in the SharedPreference files of the Lock Master app. These files hold data that affects many app functions. Malicious modifications by...

DUALSPACE Lock Master 安全漏洞

DUALSPACE Lock Master is a smart and secure Android app lock from DUALSPACE. A security vulnerability exists in DUALSPACE Lock Master version 2.2.4 that stems from allowing unauthorized apps to modify values in their SharedPreference files, which contain data that affects the functionality of man...

CVE-2023-29733

The CVE-2023-29733 entry concerns the Lock Master app (Android) version 2.2.4. The vulnerability enables unauthorized apps to modify values in the app’s SharedPreference storage, which holds data that governs many functions. This can lead to security issues such as functionality manipulation and ...