953 matches found
PoC-for-CVE-2024-7014-Exploit
CVE-2024-7014漏洞利用的PoC 针对Telegram for Android（版本10.14.4及更早版本）中CVE-2024-7014（EvilVideo）漏洞的概念验证。该程序将一个伪装成视频的恶意文件上传到Telegram频道，利用该安全漏洞安装恶意软件或重定向用户。 先决条件 您的系统上已安装 Python 3.x。 pyTelegramBotAPI 库（pip install pyTelegramBotAPI）。 一个 Telegram 机器人令牌 一个 Telegram 频道或聊天 ID，机器人具有在该频道发布的权限。...
android-app
ProtonVPN for Android Copyright c 2019 Proton AG ダウンロード !GitHub で入手https://assets.kitploit.com/production/public/readmes/50914/e73aa9f910b0d8c3484bda6ecf61bb21d05d928d646a676d8ec96cf26268cc8f/3d...
CVE-2021-43530-UXSS-On-QRcode-Reader-
CVE-2021-43530-UXSS-On-QRcode-Reader- CVE-2021-43530 범용 XSS 취약점이 Firefox for Android에 존재했습니다. QR 코드에서 스캔한 URL을 처리할 때 부적절한 이스케이프 처리로 인해 발생했습니다. 이 버그는 Firefox for Android에만 영향을 미칩니다. 다른 운영 체제는 영향을 받지 않습니다.. 이 취약점은 Firefox 94에 영향을 미칩니다...
EUVD-2026-69736
Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-69728
Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
DEBIAN-CVE-2026-84330
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-84327
A flaw was found in Autofill in Google Chrome for Android. Incorrect authorization in the Autofill feature could allow a remote attacker, through social engineering, to exploit a crafted HTML page. This could lead to the disclosure of sensitive user information...
CVE-2026-84333
CVE-2026-84333 is a use-after-free vulnerability in Dawn , a graphics abstraction component of Google Chrome , affecting versions prior to 152.0.7977.75 on Android (and 152.0.7977.76 on Windows/Mac). A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page, ...
CVE-2026-84352
Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-84353
Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-84353
CVE-2026-84353 is a critical use-after-free vulnerability in Shared Tab Groups of Google Chrome prior to version 152.0.7977.75 (Android/Linux) and 152.0.7977.76 (Windows/Mac). A remote attacker leveraging social engineering (e.g., luring a user to a malicious website or HTML email) can execute ar...
CVE-2026-84353
Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-84127
A flaw was found in the WebExtensions component of Firefox for Android. This vulnerability allows for information disclosure, potentially enabling an attacker to gain access to sensitive data...
CVE-2026-84127
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155...
CVE-2026-84117
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155...
CVE-2026-84127 Information disclosure in the WebExtensions component in Firefox for Android
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155...
CVE-2026-84127
CVE-2026-84127 is an information disclosure vulnerability in the WebExtensions component of Firefox for Android . A remote attacker with user interaction could potentially access sensitive data , resulting in a low confidentiality impact . The CNA-assigned CVSS v3.1 score is 4.3 (Medium) (AV:N/AC...
EUVD-2026-69076
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155...
CVE-2026-84117
CVE-2026-84117 is a privilege escalation vulnerability in Firefox for Android , allowing an attacker to gain elevated privileges beyond those normally granted to the browser. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-based attack r...