MAL-2025-45502 Malicious code in palynology-galaxy-fusion-playwright (npm)

The package palynology-galaxy-fusion-playwright was found to contain malicious code...

Malicious code in galaxy-nucleosynthesis-lithosphere-xenos (npm)

The package galaxy-nucleosynthesis-lithosphere-xenos was found to contain malicious code...

MAL-2025-44049 Malicious code in dorado-galaxy-graviton-archaeometry (npm)

The package dorado-galaxy-graviton-archaeometry was found to contain malicious code...

MAL-2025-44350 Malicious code in galaxy-ganymede-perseus-update (npm)

The package galaxy-ganymede-perseus-update was found to contain malicious code...

CVE-2023-21482

Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before completion of Setup wizard...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2024-34598

Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store...

CVE-2024-34598

Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store...

CVE-2024-34598

CVE-2024-34598 affects Samsung GoodLock, with an improper export of a component prior to version 2.2.04.95. The root cause is an export issue that permits local attackers to install arbitrary applications from the Galaxy Store. Public sources consistently describe the impact as local, requiring n...

CVE-2024-34598

Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store...

CVE-2024-34598

Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store...

PT-2025-35902

Name of the Vulnerable Software and Affected Versions GoodLock versions prior to 2.2.04.95 Description An improper component export in GoodLock allows local attackers to install arbitrary applications from the Galaxy Store. Recommendations Update GoodLock to version 2.2.04.95 or later...

SAMSUNG GoodLock 安全漏洞

SAMSUNG GoodLock is a software from Samsung South Korea that adjusts the functionality and appearance of the user interface. A security vulnerability exists in SAMSUNG GoodLock versions prior to 2.2.04.95, which stems from improper component export and could allow a local attacker to install...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21482

Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before completion of Setup wizard...

CVE-2023-21482

Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before completion of Setup wizard...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21483

CVE-2023-21483 concerns Samsung Galaxy Store prior to 4.5.53.6 with an improper access control flaw that lets a local attacker access protected data via an exported service. Affected component: Galaxy Store (mobile app). Root cause: improper access control enabling data exposure without remote ex...