CVE-2023-29758

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

CVE-2023-29752: Incorrect Authorization

An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component...

CVE-2023-29751: Origin Validation Error

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

PT-2023-22404 · Unknown · Blue Light Filter

Name of the Vulnerable Software and Affected Versions: Blue Light Filter version 1.5.5 Description: The issue allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. This can lead to unauthorized access and control. Recommendations: For Blue...

PT-2023-22402 · Twilight · Twilight

Name of the Vulnerable Software and Affected Versions: Twilight version 13.3 Description: The issue allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. This can lead to unauthorized access and control. Recommendations: For Twilight version...

PT-2023-22405 · Unknown · Blue Light Filter

Name of the Vulnerable Software and Affected Versions: Blue Light Filter version 1.5.5 Description: The issue allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files. This can lead to a denial of service. Recommendations: For Blue Light Filter...

PT-2023-22406 · Unknown · Flightaware

Name of the Vulnerable Software and Affected Versions: FlightAware version 5.8.0 Description: The issue allows unauthorized apps to cause a persistent denial of service by manipulating the database files. Recommendations: For FlightAware version 5.8.0, at the moment, there is no information about...

Leap Apps Group Blue Light Filter has a security vulnerability

Leap Apps Group Blue Light Filter is a blue light filter application from Leap Apps Group, Inc. A security vulnerability exists in Leap Apps Group Blue Light Filter version v.1.5.5 that originates from an unauthorized application that causes privilege escalation through manipulation of the...

Leap Apps Group Blue Light Filter has a security vulnerability

Leap Apps Group Blue Light Filter is a blue light filter application from Leap Apps Group, Inc. A security vulnerability exists in Leap Apps Group Blue Light Filter version v.1.5.5 that originates from an unauthorized application that causes privilege escalation through manipulation of the...

Over 60K Adware Apps Posing as Cracked Versions of Popular Apps Target Android Devices

Thousands of adware apps for Android have been found to masquerade as cracks or modded versions of popular applications to serve unwanted ads to users as part of a campaign ongoing since October 2022. "The campaign is designed to aggressively push adware to Android devices with the purpose to dri...

Cross-site Scripting (XSS)

com.liferay.client.extension.type.impl is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the IFrame-type remote apps in the library because it does not properly escape the URL fields, which allows an attacker to inject and execute malicious JavaScript through the remote app's...

The Annual Report: 2024 Plans and Priorities for SaaS Security

Over 55% of security executives report that they have experienced a SaaS security incident in the past two years — ranging from data leaks and data breaches to SaaS ransomware and malicious apps as seen in figures 1 and 2. --- Figure 1. How many organizations have experienced a SaaS security...

The Annual Report: 2024 Plans and Priorities for SaaS Security

Over 55% of security executives report that they have experienced a SaaS security incident in the past two years — ranging from data leaks and data breaches to SaaS ransomware and malicious apps as seen in figures 1 and 2. --- Figure 1. How many organizations have experienced a SaaS security...

Huawei HarmonyOS security vulnerabilities

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a whitelist emulation vulnerability in Huawei Desktop, which can be exploited by...

CVE-2023-25749

Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. This bug only affects Firefox for Android. Other version...

UBUNTU-CVE-2023-25749

Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. This bug only affects Firefox for Android. Other version...

CVE-2023-29724

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with...

CVE-2023-29725

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting...

Design/Logic Flaw

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with...

Design/Logic Flaw

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting...