17 matches found
whisperpair-poc-tool
WhisperPair-PoC-Tool 与研究成果 深入探究 CVE-2025-36911 及 Google Fast Pair 生态系统中的安全漏洞 博客文章 执行摘要 Google Fast Pair 旨在让蓝牙配对变得无缝：轻触通知即可连接。但当这种无缝体验变成安全负担时会发生什么？WhisperPair-PoC-Tool 是一款安全研究工具，它揭示了影响数百万蓝牙配件的两类关键漏洞：未授权配对绕过和 Find My Device 网络追踪利用。 本文详细介绍了 WhisperPair-PoC-Tool 的技术内部原理、它所利用的协议缺陷，以及这对蓝牙配件生态系统意味着什么。 目...
FMD Android
FMD Android 通过短信、即时通讯工具或网页界面（FMD 服务器）查找您的设备。 FMD 允许您在设备丢失时对其进行定位、响铃、擦除以及执行其他命令。它旨在成为 Google 查找设备的安全开源替代方案。 为什么？ 上周我丢失了全新的手机。如果我使用了 Google 服务，找到它的机会会更大。为什么没有人创建一个开源应用，既能在不放弃隐私的情况下找到丢失的设备？ 如果您喜欢 FMD 并想支持它，请广而告之或捐赠。 文档 文档可以在网站上找到。 贡献 有关翻译说明和其他贡献方式，请参阅贡献指南。 构建 构建 FMD Android 需要 Java 和 Android...
Exploit for CVE-2025-36911
WhisperPair-PoC-Tool and Research A deep dive into CVE-2025-3...
EUVD-2023-25452
Malicious code in bioql PyPI...
CVE-2023-21284
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...
How to turn off location tracking on Android
Android devices come with location services. Some apps need access to location services to function properly. However, there may be reasons why you don’t want your device to be located, often because you don’t want to be found and the device is always with you. Depending on who you are trying to...
Google Launches AI-Powered Theft and Data Protection Features for Android Devices
Google has announced a slew of privacy and security features in Android, including a suite of advanced protection features to help secure users' devices and data in the event of a theft. These features aim to help protect data before, during and after a theft attempt, the tech giant said, adding...
CVE-2023-21284
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...
Input validation
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21284
The CVE-2023-21284 issue affects Google Android and is described across multiple sources as a denial-of-service due to incorrect input validation in multiple functions of DevicePolicyManager.java. The vulnerability is local (attack vector: local) with execution privileges and does not require use...
CVE-2023-21284
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...
PT-2023-18063 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to improper input validation in multiple functions of DevicePolicyManager.java. This could lead to local denial of service with User execution privileges needed. User...
6 tips for a cybersecure honeymoon
You've done it, you've got married. The big day is over, and while you're relaxing on honeymoon you definitely don't want to get distracted by security problems. So, we rounded up some quick tips to keep you safe. Refrain from posting on social media about your honeymoon. This is good practice...
How to set up an Android for your kids
Last week, we gave you some tips on how you can set up a new iPhone for your child to use as they start this school year. Today, we'll look at doing the same for Android phones. Setting up an Android isn't very different from setting up an iPhone as both platforms follow a similar logic to making...
Play Protect: Android’s new security system is now available
Play Protect, a security suite for Android devices, was originally introduced in mid-May of this year during the Google I/O conference. And in just a couple of months, the tech giant has made it available for all their mobile users. Play Protect is the amalgamation of Google’s Android security...
Google Adds New Behavior-Based Malware Scanner To Every Android Device
In order to keep its billions of users safe, Google has introduced another security defense for its Android devices, called Google Play Protect. Google Play Protect, which is part of the Google Play Store app, uses machine learning and app usage analysis to weed out the dangerous and malicious...
Android Gets Security Makeover With Google Play Protect
Mobile operating system Android received a big security makeover Wednesday with the introduction of Google Play Protect. At Google I/O, Google’s annual developer conference, the company teased a major update to its security platform that consists of a mix of new features, a rebranding of existing...