41 matches found
EUVD-2023-54294
Malicious code in bioql PyPI...
Malicious code in @malware-test-inure-rondo-woven-total/test-mlw3-inure-rondo-woven-total (npm)
The package @malware-test-inure-rondo-woven-total/test-mlw3-inure-rondo-woven-total was found to contain malicious code...
CVE-2023-5321
Missing Authorization in GitHub repository hamza417/inure prior to build94...
CVE-2024-0245 Task Hijacking in hamza417/inure
A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a...
CVE-2024-0245 Task Hijacking in hamza417/inure
A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a...
CVE-2024-0245: Incorrect Default Permissions
A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a...
PT-2025-12019
Name of the Vulnerable Software and Affected Versions hamza417/inure versions prior to build97 Description A misconfiguration in the AndroidManifest.xml file allows for task hijacking, permitting malicious applications to inherit permissions of the vulnerable app. This could lead to the exposure ...
Inure information leakage vulnerability
Inure is an Android application manager by the individual developer Hamza Rizwan. An information disclosure vulnerability exists in versions prior to Inure build97, which stems from a misconfiguration of the AndroidManifest.xml file and could lead to task hijacking and disclosure of sensitive...
Authorization
Missing Authorization in GitHub repository hamza417/inure prior to Build95...
CVE-2023-5862
Missing Authorization in GitHub repository hamza417/inure prior to Build95...
CVE-2023-5862: Missing Authorization
Missing Authorization in GitHub repository hamza417/inure prior to Build95...
PT-2023-32381 · Inure · Inure
Name of the Vulnerable Software and Affected Versions: inure versions prior to Build95 Description: The issue concerns a missing authorization in the GitHub repository hamza417/inure. Recommendations: For versions prior to Build95, update to Build95 or later to resolve the issue...
inure Security Vulnerabilities
inure is an elegant application manager for Android by the individual developer Hamza Rizwan. A security vulnerability exists in versions prior to inure Build95 that stems from improper application authorization and allows opening arbitrary files...
Improper Authorization allows opening of arbitrary files
Description Tested on Build94 of the Inure application. It was discovered that the application had an exported activity .activities.association.TextViewerActivity which accepted intent data via the file scheme + text/ mime type and opened the associated files from provided URI data string. The...
CVE-2023-5321
Missing Authorization in GitHub repository hamza417/inure prior to build94...
CVE-2023-5321: Missing Authorization
Missing Authorization in GitHub repository hamza417/inure prior to build94...
PT-2023-32041
Name of the Vulnerable Software and Affected Versions inure versions prior to build94 Description The issue concerns a missing authorization in the GitHub repository hamza417/inure. Recommendations For versions prior to build94, update to a version that includes the necessary authorization fixes...
inure Security Vulnerabilities
inure is an elegant application manager for Android by the individual developer Hamza Rizwan. A security vulnerability exists in versions prior to inure build94, which stems from a lack of authorization...
Improper validation of intent data received in TextViewerActivity allows opening of arbitrary files in hamza417/inure
Description Tested on Build89 of the Inure application. It was discovered that the application had an exported activity .activities.association.TextViewerActivity which accepted intent data via the file scheme + text/ mime type and opened the associated files from provided URI data string. The...
CVE-2023-4877 Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92...