CVE-2022-22267

Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...

CVE-2022-22267

Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...

Information disclosure

An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information...

Information disclosure

A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R11.0 and 2.6.30.5 in Android Q10.0 allows attackers to execute privileged action by hijacking and modifying the intent...

Information disclosure

Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...

Samsung SMR 安全漏洞

Samsung ActivityMetricsLogger is a progress measurement logger for Samsung mobile devices. An unauthorized access vulnerability exists in Samsung ActivityMetricsLogger that stems from an implicit intent hijacking scenario in ActivityMetricsLogger, which can be exploited by an attacker to obtain...

Samsung Reminder App 代码注入漏洞

Samsung Reminder App is a reminder application from Samsung South Korea that comes pre-installed on Korean branded Samsung devices. The Samsung Reminder App suffers from a security vulnerability that allows an attacker to perform privileged actions by hijacking and modifying intent...

Samsung SMR 安全漏洞

Samsung Dialer is a dialing feature for Samsung Samsung mobile devices. Samsung Dialer suffers from an information disclosure vulnerability that stems from an implicit intent hijacking in Dialer, which can be exploited by an attacker to access contact information...

Samsung Bixby Routines App 代码注入漏洞

Samsung Bixby Routines App is a feature from Samsung South Korea powered by machine learning to adapt to your life. It is used to perform various applications and settings. A security vulnerability in Bixby Routines in versions prior to version 3.1.21.8 in Android R 11.0 and version 2.6.30.5 in...

CVE-2022-22286

A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R11.0 and 2.6.30.5 in Android Q10.0 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2022-22285

The CVE-2022-22285 entry describes a vulnerability in the Samsung Reminder App where a PendingIntent weakness allows hijacking/modifying the intent to perform a privileged action. Affected software is the Samsung Reminder App (pre-installed on Samsung devices) with vulnerable versions prior to 12...

CVE-2022-22270

CVE-2022-22270 is an implicit Intent hijacking vulnerability in Samsung Dialer prior to SMR Jan-2022 Release 1 that allows unprivileged apps to access contact information. Affected: Samsung Dialer on Samsung Android devices; root cause is improper handling of implicit intents in the Dialer. Impac...

CVE-2022-22267

Samsung ActivityMetricsLogger on mobile devices is affected by CVE-2022-22267: an implicit intent hijacking flaw that can disclose information about a running application. The vulnerability is tied to ActivityMetricsLogger before SMR Jan-2022 Release 1. Documented impact is information disclosure...

Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore

Description The application does not escape special characters before output to FE, lead to stored XSS. Proof of Concept Example of a case: 1. Go to Content Content Types /Admin/ContentTypes/List 2. Create or edit a type with XSS payload into Display Name field, e.g: Social Meta Settings Tick on...

EulerOS Virtualization 3.0.2.6 : c-ares (EulerOS-SA-2021-2882)

According to the versions of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can...

in follow-redirects/follow-redirects

BUG ====== Cookie header leaked to third party site and it allow to hijack victim account SUMMURY ============ When fetching a remote url with Cookie if it get Location response header then it will follow that url and try to fetch that url with provided cookie . So cookie is leaked here to...

Careful! Uber flaw allows anyone to send an email from uber.com

On New Years Eve, Seif Elsallamy @0x21SAFE on Twitter, a bug bounty hunter and security researcher, pointed out a phish-worthy security flaw he found on Uber’s email system. The flaw allowed anyone to send emails on behalf of Uber, meaning they would end with "@uber.com", just like the one below:...

Affiliate Pro v1.7 - Multiple Cross Site Vulnerabilities

Document Title: =============== Affiliate Pro v1.7 - Multiple Cross Site Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2281 Release Date: ============= 2022-01-05 Vulnerability Laboratory ID VL-ID: ====================================...

Easy Cart Shopping Cart 2021 Cross Site Scripting

Document Title: =============== Easy Cart Shopping Cart - Search Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2298 Release Date: ============= 2021-12-15 Vulnerability Laboratory ID VL-ID: ====================================...

ASUS RT-AC52U_B1 Cross-Site Scripting Vulnerability

Asus Rt-Ac52UB1 is a dual-band wireless router from Asus China.A cross-site scripting vulnerability exists in ASUS RT-AC52UB1, which stems from the presence of invalid data filtering in ASUS RT-AC52U B1 version 3.0.0.4.380.10931, which could lead to user session hijacking. No detailed vulnerabili...