2042 matches found
CVE-2025-48564
In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
AI Pulse: The First Agentic Cyber Week
In 2025, AI bots officially entered Cyber Week. Learn how agents shaped traffic and shopper intent — and why retailers must optimize for AI-driven commerce...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android that stems from a logic error that could lead to bypassing cross-profile intent filters...
Google Android 安全漏洞
Google Android is a free and open source mobile operating system based on the Linux kernel developed by Google. Google Android suffers from a competitive condition vulnerability that can be exploited by an attacker to cause bypassing of intent filters and local elevation of privilege...
ASB-A-403565650
Bulletin has no description...
ASB-A-397216638
Bulletin has no description...
CVE-2024-11919
Inappropriate implementation in Intents in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2024-11919
Inappropriate implementation in Intents in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Malicious code in imaginative_elk_maroon-63 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9753caebcf493d2601461ff4d592659d7d94e2985362d472cfe7d301a1293f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bayu-keraktelor14-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d5856e9f1c98b001cf095277a2576671f4472ad6e1ca1455ddfd8fab89fbfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
A Secured Intent-Based Networking (SIBN) with Data-Driven Time-Aware Intrusion Detection
While Intent-Based Networking IBN promises operational efficiency through autonomous and abstraction-driven network management, a critical unaddressed issue lies in IBN's implicit trust in the integrity of intent ingested by the network. This inherent assumption of data reliability creates a blin...
CVE-2025-12080 Intent Abuse in Google Messages for Wear OS for Silent Message Sending
On Wear OS devices, when Google Messages is configured as the default SMS/MMS/RCS application, the handling of ACTIONSENDTO intents utilizing the sms:, smsto:, mms:, and mmsto: Uniform Resource Identifier URI schemes is incorrectly implemented. Due to this misconfiguration, an attacker capable of...
CVE-2025-12080 Intent Abuse in Google Messages for Wear OS for Silent Message Sending
On Wear OS devices, when Google Messages is configured as the default SMS/MMS/RCS application, the handling of ACTIONSENDTO intents utilizing the sms:, smsto:, mms:, and mmsto: Uniform Resource Identifier URI schemes is incorrectly implemented. Due to this misconfiguration, an attacker capable of...
CVE-2025-12080
CVE-2025-12080 affects Google Messages for Wear OS when it is the default SMS/MMS/RCS app. The root cause is improper handling of ACTION_SENDTO intents using sms:, smsto:, mms:, and mmsto: URI schemes, enabling an attacker who can invoke an Android intent to covertly send messages on behalf of th...
PT-2025-43458
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Android Framework component related to insufficient protection of system data. Exploitation may allow a remote attacker to elevate privileges. Additionally, a race...
PT-2025-43471
Name of the Vulnerable Software and Affected Versions affected versions not specified Description There is a potential for media deletion without the necessary MANAGE EXTERNAL STORAGE permission due to an intent redirect. This could result in local escalation of privilege and does not require use...
PT-2025-43460
Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description There is a potential bypass of user profile boundaries through improperly validated forwarded intents. This could allow for local privilege escalation without requiring additional execution privileges or user...
PT-2025-43459
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Android Framework component related to insufficient protection of system data. Successful exploitation may allow a remote attacker to elevate privileges. The issue involv...