83 matches found
ServiceCheater
ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Androidフォアグラウンドサービス権限昇格の脆弱性分析 脆弱性の背景...
ServiceCheater
CVE-2020-0108 포그라운드 서비스 권한 상승 취약점 분석 1. 취약점 배경 AOSP 2020-08 패치에서 프레임워크 계층 AMS의 취약점이 공개되었으며, 번호는 CVE-2020-0108, 등급은 High입니다. AMS의 포그라운드 서비스 처리에 있는 논리적 취약점으로, 이 취약점을 성공적으로 악용한 공격자는 포그라운드 서비스의 알림 표시를 우회하고 계속해서 백그라운드에서 실행할 수 있습니다. 공격은 로컬의 악성 앱에 의해 시작되며 사용자 상호 작용이 필요하지 않습니다. 사용자가 앱에 다른 권한을 부여한 경우 위치 지...
CVE-2025-48573
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-48573
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-48573
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-48573
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-48573
The CVE-2025-48573 entry describes a local elevation-of-privilege in Android's MediaSessionRecord.java via a path in sendCommand that could allow launching a foreground service while the app is backgrounded (FGS while-in-use abuse). The issue enables privilege escalation without extra execution p...
EUVD-2025-201775
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-48573
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android, which stems from foreground service abuse and could lead to local elevation of privilege...
ASB-A-339637822
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
PT-2025-43463
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. This issue may allow a remote attacker to elevate privileges. The iss...
EUVD-2021-26061
Malware in sbrugna...
EUVD-2021-26165
Malware in sbrugna...
EUVD-2022-25374
Malicious code in bioql PyPI...
EUVD-2023-25405
Malicious code in bioql PyPI...
EUVD-2023-25257
Malicious code in bioql PyPI...
EUVD-2021-3017
Malicious code in bioql PyPI...
EUVD-2021-3600
Malicious code in bioql PyPI...
CVE-2024-0048
In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...