PT-2023-22385 · Unknown · Edjing Mix

Name of the Vulnerable Software and Affected Versions: edjing Mix version 7.09.01 Description: The issue allows unauthorized apps to cause escalation of privilege attacks by manipulating the database. Recommendations: For edjing Mix version 7.09.01, at the moment, there is no information about a...

CVE-2023-29734

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...

CVE-2023-29733

The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a seve...

CVE-2023-29739

An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component...

PT-2023-22384 · Unknown · Lock Master

Name of the Vulnerable Software and Affected Versions: The Lock Master app version 2.2.4 Description: The issue allows unauthorized apps to modify the values in the SharedPreference files of the Lock Master app. These files hold data that affects many app functions. Malicious modifications by...

CVE-2023-29739: Undefined Security Weakness

An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component...

PT-2023-22392 · Unknown · Bestweather

Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: An issue in BestWeather allows unauthorized apps to cause a privileges escalation attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, at the moment, there is no informati...

CVE-2023-29734

CVE-2023-29734 affects edjing Mix for Android (v7.09.01). The issue allows unauthorized apps to escalate privileges by manipulating the app’s database. Documented impact is high (privilege escalation; potential confidentiality, integrity, and availability effects) with CVSS v3.1 base score 9.8. N...

CVE-2023-29740

The CVE-2023-29740 entry concerns Alarm Clock for Heavy Sleepers v5.3.2 on Android. The issue enables unauthorized apps to cause a denial-of-service by manipulating the app’s database, leading to availability impact. Documented sources consistently identify the affected software and the root caus...

CVE-2023-29745

The CVE-2023-29745 entry concerns BestWeather v7.3.1 on Android, where an unauthorized app can cause a persistent denial-of-service by manipulating the app’s database. The Red Hat and other connected documents corroborate the same description. Reported impact: LOCAL attack vector with HIGH integr...

CVE-2023-29743

CVE-2023-29743 affects BestWeather v7.3.1 on Android. The issue allows unauthorized apps to manipulate the database, causing a persistent denial of service. Documents confirm impact and CVSS 7.5 (HIGH) with network attack, no privileges, no user interaction, but do not provide exploitation detail...

CVE-2023-29742

CVE-2023-29742 affects BestWeather v7.3.1 for Android. An unauthorized app can trigger code execution by manipulating the app’s database. Root cause as stated: database manipulation enables code execution. Public details across connected sources mainly reiterate the affected version and the attac...

AI-Engine < 1.6.83 - Admin+ Stored XSS

The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example, in multisite setup. PoC Go to Meow Apps » AI Engine » Chatbot tab »...

CVE-2023-29734

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...

CVE-2023-29742

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulating the database...

Malicious code in @brand_apps/easystart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c717d46d6be03f627a5dd22496e0e0f20d6c159f0bf51e222789857061b0397 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

PT-2023-21599 · Kiddoware · Kiddoware Kids Place Parental Control

Name of the Vulnerable Software and Affected Versions: Kiddoware Kids Place Parental Control version prior to 3.8.50 Description: An issue in the Kiddoware Kids Place Parental Control application allows a child to temporarily remove all restrictions without the parents noticing. This can be...

CVE-2023-28153: Undefined Security Weakness

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...