30 matches found
CVE-2026-86550
NuBrowser , a ZTE browser product, contains a universal cross-site scripting (UXSS) vulnerability (CVE-2026-86550). The root cause is a missing protocol whitelist validation on the S.browser_fallback_url field of intent:// URIs, which allows an attacker to inject javascript: URLs via 302 redirect...
EUVD-2020-29784
Malware in sbrugna...
EUVD-2016-5767
Malware in sbrugna...
CVE-2020-8954
OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.a link that opens another app in the browser can be manipulated...
SUSE CVE-2020-6827
When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR...
SUSE CVE-2021-23957
Navigations through the Android-specific intent URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 85...
CVE-2021-29370
A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website...
PT-2021-18189
Name of the Vulnerable Software and Affected Versions: Thanos-Soft Cheetah Browser version 1.2.0 Description: A UXSS issue was discovered due to inadequate filtering of the intent scheme, resulting in cross-site scripting on the Cheetah Browser in any website. Recommendations: For version 1.2.0, ...
CVE-2021-29370: Improper Neutralization of Input During Web Page Generation
A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website...
CVE-2021-23957
Navigations through the Android-specific intent URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 85...
CVE-2020-8954
OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.a link that opens another app in the browser can be manipulated...
CVE-2020-8954
OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.a link that opens another app in the browser can be manipulated...
Buffer overflow
OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.a link that opens another app in the browser can be manipulated...
CVE-2020-8954
OpenSearch Web browser 1.0.4.9 is affected by an Intent Scheme Hijacking vulnerability. The description indicates that a link in the browser that opens another app can be manipulated, enabling potential redirection to unintended applications. The provided documents do not include further technica...
CVE-2020-8954
OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.a link that opens another app in the browser can be manipulated...
CVE-2020-8954: Incorrect Default Permissions
OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.a link that opens another app in the browser can be manipulated...
PT-2020-20392
Name of the Vulnerable Software and Affected Versions OpenSearch Web browser version 1.0.4.9 Description The issue allows Intent Scheme Hijacking, where a link that opens another app in the browser can be manipulated. Recommendations For OpenSearch Web browser version 1.0.4.9, consider restrictin...
CVE-2020-6827
When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR...
SHAREit for Android Vulnerabilities
Lenovo Security Advisory: LEN-6421 Potential Impact: Users with older Android versions may be vulnerable to remote code execution, or a UXSS attack and users with any Android version may be vulnerable to an intent scheme attack. Severity: High Lenovo SHAREit Application: End of Lenovo Support...