61 matches found
apk-interceptor
apk-interceptor Android 深层链接、Intent 和 WebView 桥接评估辅助工具 apk-interceptor 是一个专为授权应用安全评估而设计的便携式 Android 测试 APK。它帮助安全工程师验证 Android 应用如何处理外部入口点，例如自定义 URI 方案、深层链接、导出的 Activity 和 WebView JavaScript 桥接。 该工具有意受限： 它不声明 android.permission.INTERNET 它不向外部服务器发送数据 它不执行 Shell 命令 它不需要 root、Magisk、Frida 或运行时插桩...
com.heytap.browser
漏洞报告 概述： 在 Android 平台的 com.heytap.browser 应用中发现了一个漏洞。该漏洞允许攻击者在无需任何权限的情况下，在应用上下文中执行任意 JavaScript 代码。 应用详情： 供应商： - ColorOS 应用名称： 'Internet Browser' com.heytap.browser 版本： 45.10.3.4.1 组件： com.android.browser.RealBrowserActivity 漏洞详情： 漏洞类型： JavaScript 代码执行 攻击向量： 通过导出的 activity 组件 所需权限： 无 描述：...
Damn-Vulnerable-Android-Components
可恶的易受攻击的安卓组件 - DVAC 筛子重生！ 可恶的易受攻击的安卓组件（DVAC）是一款教育性安卓应用，专门暴露和演示与各种安卓组件（如 Activity、Intent、Content Provider 和 Broadcast Receiver）相关的漏洞。它被设计成一个密码管理器应用，用于安全地管理和存储密码（笑）。 受 Sieve 应用程序开创性工作的启发（该应用专注于类似漏洞，但已过时且与新版本安卓不兼容），DVAC 旨在填补空白，为学习安卓安全提供现代、最新的平台。DVAC...
CVE-2023-41898_Lab
CVE-2023-41898 未经验证的 Deep Link 实验室 这是一个基于 Home Assistant Companion for Android 的公开漏洞报告（GHSL-2023-142）以及漏洞版本 2023.8.2 的开源结构制作的教育性精简复现实验环境。 不会使用真实的 Home Assistant 服务器、账户或令牌，仅暴露名为 LABTOKENCVE202341898NOTREAL 的固定虚拟令牌。 漏洞概述 目标：Home Assistant Companion for Android 受影响版本：低于 2023.9.2（依据官方公告） 修复版本：2023.9....
CVE-2020-23349_Lab
CVE-2020-23349 Android 实验 这是一个在本地复现新浪微博 Android SDK 4.2.7 中 Intent 重定向漏洞的教学项目。 请仅在获得授权的测试设备或模拟器上使用。请勿将其用于针对真实用户应用。 构成 victim: 包含实际 openDefault-4.2.7.aar 的漏洞应用 attacker: 调用 exported WbShareTransActivity 的攻击应用 victim/.../PrivateActivity: android:exported="false" 的复现目标 漏洞流程如下： Attacker 앱 - exported...
CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component
CVE-2026-22010 – Android Intent 重定向到已导出组件 程序代码 Java/Android 模拟 // VulnActivity.java - Exported activity that forwards intents public class VulnActivity extends Activity @Override protected void onCreateBundle b super.onCreateb; Intent incoming = getIntent; // Retrieve target component from extras...
CVE-2026-47363
In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...
CVE-2026-47361
In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conversationid. When the activity closes and no in-process session matches that ID, it unconditionally cancels notification ...
EUVD-2026-54570
In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...
CVE-2026-47363
The Datadog Android application versions prior to v541-5.9.2 are vulnerable to an account-confusion issue. The exported launcher activity, AppActivity , accepts an attacker-supplied session (including OAuth tokens ) via Intent extras without a permission guard. Because the app fails to validate t...
CVE-2026-44964
In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...
CVE-2026-47361
In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conversationid. When the activity closes and no in-process session matches that ID, it unconditionally cancels notification ...
CVE-2026-47361
In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conversationid. When the activity closes and no in-process session matches that ID, it unconditionally cancels notification ...
EUVD-2026-54567
In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conversationid. When the activity closes and no in-process session matches that ID, it unconditionally cancels notification ...
Exploit for CVE-2026-40000
CVE-2026-40000 A poc for CVE-2026-40000https://vulners.com/...
CVE-2026-57848 Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation
Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...
multi-layered-security-assessment
Advanced Network Attack and Defense: Multi-Layered Assessment...
Basecamp: Any installed app can force immediate logout and persistent DOS of authenticated Basecamp sessions via unprotected exported StartActivity
A vulnerability was discovered in the Basecamp Android app that allowed any installed app to force immediate logout and persistent denial-of-service of authenticated Basecamp sessions. The vulnerability was due to the com.basecamp.bc4.app.main.start.StartActivity being declared as exported withou...
