2042 matches found
CVE-2021-25414
Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to copy or overwrite arbitrary files with Samsung Contacts privilege...
Hackers Can Exploit Samsung Pre-Installed Apps to Spy On Users
Multiple critical security flaws have been disclosed in Samsung's pre-installed Android apps, which, if successfully exploited, could have allowed adversaries access to personal data without users' consent and take control of the devices. "The impact of these bugs could have allowed an attacker t...
Samsung SMR 安全漏洞
Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists prior to SMR june -2021 Release 1, which stems from an incorrect purge of the intrusion intent in Samsung Contacts that can be exploited by a local...
SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2020:14339-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14339-1 advisory. - When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the...
ASB-A-181962311
In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...
Feds Shut Down Fake COVID-19 Vaccine Phishing Website
Federal law enforcement in Maryland has shut down a fraudulent website targeting immigrant communities that claimed to be for a company developing a COVID-19 vaccine. Instead, the site was stealing information from people with the purpose of using it for future cybercriminal activity. The U.S...
Sandbox Restrictions Bypass
firefox is vulnerable to sandbox restrictions bypass. Navigations through the Android-specific intent URL scheme could be abused to escape the iframe sandbox...
CVE-2021-29370
A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website...
CVE-2021-0444
In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8...
Thanos-soft Cheetah Browser 跨站脚本漏洞
Thanos-soft Cheetah Browser is an application from Thanos-soft. A browser. A cross-site scripting vulnerability exists in Thanos-Soft Cheetah Browser in Android 1.2.0, which stems from an insufficient filter in the intent scheme. It results in cross-site scripting being required for any website o...
CVE-2021-25377
Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...
CVE-2021-25379
Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...
CVE-2021-25379
Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...
CVE-2021-25377
Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...
CVE-2021-25357
A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O8.x and P9.0, 3.4.81.1 in Android Q10,0, and 3.6.80.7 in Android R11.0 allows unprivileged applications to access contact information...
CVE-2021-25364
A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact information...
Information disclosure
Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...
Design/Logic Flaw
Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...
CVE-2021-25379
Samsung Gallery (Android) prior to version 5.4.16.1 is affected by an intent-redirection elevation-of-privilege vulnerability. The issue allows an attacker to trigger privileged actions within the app. Public sources consistently describe the flaw as an elevation of privilege via intent redirecti...