CVE-2025-21027

Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM...

CVE-2023-21474

Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege...

CVE-2023-21474

CVE-2023-21474 affects Samsung SecSettings prior to SMR Apr-2022 Release 1. The vulnerability is described as an intent redirection issue that could allow an attacker to access arbitrary files with system privileges. The public description identifies SecSettings as the affected component and the ...

CVE-2023-21474

Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege...

SAMSUNG S Assistant 安全漏洞

SAMSUNG S Assistant is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a cell phone management function. A security vulnerability exists in SAMSUNG S Assistant prior to version 9.3.2, which stems from insufficient validation of intent by...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Sep-2025 Release 1, which stems from improper broadcast receiver inten...

WordPress plugin Exit Intent Popup 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2022 Release 1, which stems from an intent redirection that could...

PT-2025-35692

Name of the Vulnerable Software and Affected Versions: S Assistant versions prior to 9.3.2 Description: Improper verification of intent by SamsungExceptionalBroadcastReceiver allows local attackers to modify itinerary information. Recommendations: Update S Assistant to version 9.3.2 or later...

PT-2025-35677

Name of the Vulnerable Software and Affected Versions: SecSettings versions prior to SMR Apr-2022 Release 1 Description: An intent redirection issue exists in SecSettings that allows attackers to access arbitrary files with system privileges. Recommendations: Update SecSettings to SMR Apr-2022...

SAMSUNG S Assistant 安全漏洞

SAMSUNG S Assistant is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a cell phone management function. A security vulnerability exists in SAMSUNG S Assistant prior to version 9.3.2, which stems from insufficient validation of intent by...

PT-2025-35769

Name of the Vulnerable Software and Affected Versions: kamleshyadav Exit Intent Popup versions n/a through 1.0.1 Description: A Server-Side Request Forgery SSRF vulnerability exists in kamleshyadav Exit Intent Popup. This issue allows attackers to perform Server Side Request Forgery...

PT-2025-35694

Name of the Vulnerable Software and Affected Versions: S Assistant versions prior to 9.3.2 Description: Improper verification of intent by ExternalBroadcastReceiver in S Assistant allows local attackers to modify itinerary information. Recommendations: Update S Assistant to version 9.3.2 or later...

PT-2025-35681

Name of the Vulnerable Software and Affected Versions: ImsService versions prior to SMR Sep-2025 Release 1 Description: Improper verification of intent by a broadcast receiver in ImsService allows local attackers to temporarily disable the SIM. Recommendations: Update ImsService to SMR Sep-2025...

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22433

CVE-2025-22433 affects Android Framework: a logic error in canForward() of IntentForwarderActivity.java may bypass the cross-profile intent filter used in Work Profiles, enabling local privilege escalation without extra privileges or user interaction. Documents cite affected component and impact;...

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...