apk-interceptor

apk-interceptor Android deeplink, Intent, and WebView bridge assessment helper apk-interceptor is a portable Android testing APK for authorized application security assessments. It helps security engineers verify how an Android app handles external entry points such as custom URI schemes,...

Damn-Vulnerable-Android-Components

Die Damne verwundbaren Android-Komponenten - DVAC Das Sieb, wiedergeboren! Damn Vulnerable Android Components DVAC ist eine lehrreiche Android-Anwendung, die absichtlich entwickelt wurde, um Schwachstellen in Bezug auf verschiedene Android-Komponenten wie Activities, Intents, Content Provider und...

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

slicer

Slicer Uma ferramenta para automatizar o processo de reconhecimento em um arquivo APK. O Slicer aceita um caminho para um diretório de APK extraído e retorna todas as activities, receivers e services que estão exportados e possuem permissões null e podem ser provocados externamente. Nota : O APK...

Damn-Vulnerable-Bank

Damn Vulnerable Bank गाइड: https://rewanthtammana.com/damn-vulnerable-bank/ एप्लिकेशन के बारे में Damn Vulnerable Bank को जानबूझकर असुरक्षित एंड्रॉइड एप्लिकेशन के रूप में डिज़ाइन किया गया है। सभी विवरण गाइड में प्रलेखित हैं, यहाँ. आगामी सत्र NoNameCon https://cfp.nonamecon.org/nnc2021/talk/WCKLTN...

com.heytap.browser

Schwachstellenbericht Übersicht: Eine Schwachstelle wurde in der Anwendung com.heytap.browser auf der Android-Plattform entdeckt. Die Schwachstelle ermöglicht es einem Angreifer, beliebigen JavsScript-Code im Kontext der Anwendung ohne Berechtigungen auszuführen. Anwendungsdetails: Anbieter: -...

CVE-2026-12960

CVE-2026-12960 Esportazione impropria dei componenti dell'app Android ASUS Router Un componente incluso nell'app Android ASUS Router com.asus.aihome era dichiarato android:exported="true" senza android:permission. Qualsiasi altra app sullo stesso dispositivo, senza alcuna autorizzazione, poteva...

CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component

CVE-2026-22010 – Reindirizzamento Android Intent verso Componente Esportato Codice del programma simulazione Java/Android root@kitploit: // VulnActivity.java - Exported activity that forwards intents public class VulnActivity extends Activity @Override protected void onCreateBundle b...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2023-41898_Lab

CVE-2023-41898 Unvalidated Deep Link Lab Dieses Lab ist eine pädagogische, verkleinerte Reproduktion, die auf dem öffentlichen Schwachstellenbericht GHSL-2023-142 für Home Assistant Companion for Android und der Open-Source-Struktur der verwundbaren Version 2023.8.2 basiert. Es werden keine echte...

CVE-2020-23349_Lab

CVE-2020-23349 Android Lab Progetto didattico per riprodurre localmente la vulnerabilità di Intent Redirection nell'SDK Android di Sina Weibo 4.2.7. Utilizzare solo su dispositivi di test autorizzati o emulatori. Non utilizzarlo contro app di utenti reali. Struttura victim: app vulnerabile che...

CVE-2026-16686 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

CVE-2026-16686 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...

EUVD-2026-58822

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...

CVE-2026-74245

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...

CVE-2026-74245

Red Hat Quay 's exported logs feature contains an authorization flaw that allows an unauthenticated attacker with a valid file ID to download exported action logs. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks . The impact is information disclosure ...

CVE-2026-74245 Quay: unauthenticated exported logs download in quay

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...

CVE-2026-74245

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...

PT-2026-72131

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A flaw in the exported logs feature allows an unauthenticated attacker to download exported action logs without proper authorization if they possess a valid file ID. Although these IDs a...

CVE-2026-47363

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...