EUVD-2022-42323

Malicious code in bioql PyPI...

CVE-2022-39878

Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...

CVE-2022-39878

Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...

CVE-2022-39878

Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...

Improper access control

Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...

CVE-2022-39878

Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...

PT-2022-25070 · Samsung · Samsung Checkout

Name of the Vulnerable Software and Affected Versions: Samsung Checkout versions prior to 5.0.55.3 Description: The issue is related to improper access control, allowing attackers to access sensitive information. This is achieved via implicit intent broadcast. Recommendations: For versions prior ...

PT-2022-25064 · Sharelive · Sharelive

Name of the Vulnerable Software and Affected Versions: ShareLive versions prior to 13.2.03.5 Description: The issue is related to an improper restriction of broadcasting Intent in ShareLive, which leaks the MAC address of the connected Bluetooth device. Recommendations: For versions prior to...

PT-2022-23679 · Unknown · Waterplugin

Name of the Vulnerable Software and Affected Versions: Waterplugin versions prior to 2.2.11.22081151 Description: The issue is related to improper restriction of broadcasting Intent in SaWebViewRelayActivity, allowing an attacker to access files without permission. Recommendations: For versions...

CVE-2022-30725

Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionError function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device...

Session fixation

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient authority or session fixation. This was resolved by only allowing certain safe-listed headers. Note: This...

CVE-2020-26975

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient authority or session fixation. This was resolved by only allowing certain safe-listed headers. Note: This...