slicer

Slicer 一个用于自动化 APK 文件信息收集过程的工具。 Slicer 接收一个已解压 APK 文件的路径，然后返回所有被导出、权限为 null 且可以被外部调用的 activity、receiver 和 service。 注意 ：APK 必须通过 jadx 或 apktool 解压。 目录 Slicer 目录 摘要 特性 安装 用法 用法示例 鸣谢 贡献 支持 摘要 为什么？ 我大约三周前（2020 年 6 月）开始做漏洞赏金，并一直尽力研究 Android...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

EUVD-2026-34806

Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows local attacker to change audio configuration...

CVE-2026-21032

Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script...

CVE-2026-21029

Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations...

CVE-2026-20993

Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information...

PT-2026-25598

Name of the Vulnerable Software and Affected Versions Samsung Assistant versions prior to 9.3.10.7 Description An improper export of Android application components in Samsung Assistant allows a local attacker to access saved information. Recommendations Update Samsung Assistant to version 9.3.10....

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in Samsung Mobile Devices that stems from improperly exported Android application components, which could lead to file...

EUVD-2025-26240

Malicious code in bioql PyPI...

CVE-2025-9695

CVE-2025-9695 affects GalleryVault Gallery Vault App for Android up to version 4.5.2. The issue arises from an improperly exported AndroidManifest.xml in the component com.thinkyeah.galleryvault, enabling a local-execution path. The vulnerability could lead to exposure of confidential data on the...

CVE-2025-9675

A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.tuyangkeji.changevoice. Executing manipulation can lead to improper export of android application components. It is possible to launch t...

PT-2025-35310

Name of the Vulnerable Software and Affected Versions: Kakao Hey Kakao App versions up to 2.17.4 Description: A vulnerability exists in the Kakao Hey Kakao App on Android, affecting an unknown functionality within the AndroidManifest.xml file of the com.kakao.i.connect component. This issue resul...

CVE-2025-9097

A vulnerability was found in Euro Information CIC banque et compte en ligne App 12.56.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.cicprod.bad. The manipulation leads to improper export of android application...

CVE-2025-9097

A vulnerability was found in Euro Information CIC banque et compte en ligne App 12.56.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.cicprod.bad. The manipulation leads to improper export of android application...

CVE-2025-8745

A vulnerability, which was classified as problematic, has been found in Weee RICEPO App 6.17.77 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.ricepo.app. The manipulation leads to improper export of android application components. An...

CVE-2023-41826

A PendingIntent hijacking vulnerability in Motorola Device Help Genie application that could allow local attackers to access files or interact with non-exported software components without permission...

PT-2024-12990 · Motorola · Motorola Device Help

Name of the Vulnerable Software and Affected Versions: Motorola Device Help Genie application affected versions not specified Description: A PendingIntent hijacking issue in the Motorola Device Help Genie application could allow local attackers to access files or interact with non-exported softwa...

Mes Comptes - LCL pour mobile - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Mes Comptes - LCL pour mobile published at the 'play' market has multiple vulnerabilities...

Catch! - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Catch! published at the 'play' market has multiple vulnerabilities...

Crowdfire: Social Media Manager - Corrupted files, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Crowdfire: Social Media Manager published at the 'play' market has multiple vulnerabilities...