747 matches found
AndroidRock Call Blocker 安全漏洞
AndroidRock Call Blocker is an application from AndroidRock Inc. It can automatically reject unwanted calls. A security vulnerability exists in AndroidRock Call Blocker version 6.6.3, which originates from the fact that an attacker can use the key component to inject a large amount of dirty data...
AndroidRock Call Blocker 安全漏洞
AndroidRock Call Blocker is an application from AndroidRock Inc. It can automatically reject unwanted calls. A security vulnerability exists in AndroidRock Call Blocker version 6.6.3, which stems from an exposed component that deletes private data and can be exploited by an attacker to conduct a...
CVE-2023-29728
The CVE-2023-29728 entry affects Call Blocker for Android (version 6.6.3). The issue is that attackers can tamper with feature-related data, enabling a severe elevation of privilege. This is described consistently across sources (e.g., Red Hat and NVD entries). The likely impact is high (CVE/metr...
CVE-2023-29726
The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, t...
CVE-2023-29728
The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack...
CVE-2023-29728: Origin Validation Error
The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack...
CVE-2023-29726
The CVE-2023-29726 entry describes a vulnerability in Call Blocker for Android 6.6.3 where a component is opened that allows an attacker to inject large volumes of data into the app’s database. On startup, the app loads database data into memory, and injecting excessive data triggers an out‑of‑me...
CVE-2023-29727
The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause...
CVE-2023-29726
The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, t...
PT-2023-22379 · Unknown · The Call Blocker
Name of the Vulnerable Software and Affected Versions: The Call Blocker application version 6.6.3 Description: The issue allows unauthorized applications to use exposed components to delete data stored in the database related to user privacy settings, affecting the normal functionality of the...
PT-2023-22380 · Unknown · Call Blocker
Name of the Vulnerable Software and Affected Versions: Call Blocker application version 6.6.3 Description: The issue allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack. Recommendations: For version 6.6.3, update to a newer version that contai...
CVE-2023-29728
The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack...
CVE-2023-29727
The CVE-2023-29727 entry concerns the Android app Call Blocker (version 6.6.3). Multiple connected sources confirm a root cause where exposed components can be invoked by unauthorized applications to delete data in the app’s privacy-related database, which disrupts normal functionality and enable...
CVE-2023-29727: Insecure Storage of Sensitive Information
The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause...
PT-2023-22378 · Unknown · Call Blocker
Name of the Vulnerable Software and Affected Versions: Call Blocker application version 6.6.3 Description: The issue allows an attacker to inject large amounts of data into the application's database, causing it to crash due to an out-of-memory OOM error when it loads the data into memory on...
CVE-2023-29726: Improper Resource Shutdown or Release
The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, t...
A week in security (May 8-14)
Last week on Malwarebytes Labs: The rise of "Franken-ransomware," with Allan Liska: Lock and Code S04E11 Ransomware review: May 2023 Brightline breach hits at least 964,000 people, US records show Ransomware attack on MSI led to compromised Intel Boot Guard private keys Fake system update drops...
YouTube is testing ad blocker detection
YouTube is dipping a toe into the muddy waters of ad-blocker blocking, with ad-blocker using Redditors complaining about a popup that warns "Ad blockers are not allowed on YouTube," when they visit the site. Image source: Reddit user Sazk100 The popup message explains that "Ads allow YouTube to...
