CVE-2023-29459

The laola.redbull application through 5.1.9-R for Android exposes the exported activity at.redbullsalzburg.android.AppMode.Default.Splash.SplashActivity, which accepts a data: URI. The target of this URI is subsequently loaded into the application's webview, thus allowing the loading of arbitrary...

CVE-2022-4235

RushBet version 2022.23.1-b490616d allows a remote attacker to steal customer accounts via use of a malicious application. This is possible because the application exposes an activity and does not properly validate the data it receives...

PT-2023-14109 · Rushbet · Rushbet

Name of the Vulnerable Software and Affected Versions: RushBet version 2022.23.1-b490616d Description: The issue allows a remote attacker to steal customer accounts by utilizing a malicious application. This is due to the application exposing an activity and failing to properly validate the...

O2 Business for Android Input Validation Error Vulnerability

O2 Business for Android is an Android-based application for connecting O2 Business solutions from O2 UK. A security vulnerability exists in version 1.2.0 of O2 Business for Android-based platforms, which stems from the program exposing the canvasm.myo2.SplashActivity activity to other application...

CVE-2020-6869

All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installation...