CVE-2026-108897

A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The...

CVE-2026-108897 Smart Media4U Technology SHAREit App WebView JS Bridge syncInvoke routine

A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The...

EUVD-2026-97473

A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The...

CVE-2026-108897 Smart Media4U Technology SHAREit App WebView JS Bridge syncInvoke routine

A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The...

CVE-2026-108897

A security vulnerability exists in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. The flaw resides in the syncInvoke function of the WebView JS Bridge component, where manipulation leads to an exposed dangerous routine . This vulnerability can be triggered remotely . While the exploi...

PT-2026-110609

A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38 ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The...

CVE-2026-108897: Exposed Dangerous Method or Function

A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The...

Smart Media4U SHAREit App: Permission management and access control issues

The Smart Media4U SHAREit App 6.27.38ww version has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper handling of the syncInvoke function in the WebView JS Bridge component, allowing dangerous routines to be exposed. Attackers can initiat...

Malicious code in jz-user-js-bridge (npm)

Source: amazon-inspector edad349ed15deade0c4a98c62854a824c3319093fa858f5be069f8cc393a4617 The package jz-user-js-bridge was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jz-native-js-bridge (npm)

Source: amazon-inspector 8f5be9f16b75f7bf0ca5477443252a99142fcc146e923a7f77862df124ad6ac5 The package jz-native-js-bridge was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-69255

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent in packages/components/nodes/agents/CSVAgent/CSVAgent.ts extracted attacker-controlled CSV data with file.split','.pop and interpolated it directly into executable Python as...

MAL-2025-192819 Malicious code in jz-user-js-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edad349ed15deade0c4a98c62854a824c3319093fa858f5be069f8cc393a4617 The package jz-user-js-bridge was found to contain malicious code...

MAL-2025-192817 Malicious code in jz-native-js-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5be9f16b75f7bf0ca5477443252a99142fcc146e923a7f77862df124ad6ac5 The package jz-native-js-bridge was found to contain malicious code...

Malicious code in jz-native-js-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5be9f16b75f7bf0ca5477443252a99142fcc146e923a7f77862df124ad6ac5 The package jz-native-js-bridge was found to contain malicious code...

CVE-2020-6830

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...

Basecamp: com.basecamp.bc3 Webview Javascript Injection and JS bridge takeover

It was identified that the android com.basecamp.bc3 application, contains a Webview where the loaded URLs are not sanitised properly. As this webview's functionality is extended via javascript interfaces and has the javascript enabled it is possible to inject arbitrary javascript code which will ...

Privilege escalation

An issue was discovered in Comelit "App lejos de casa web" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges installer or administrator for the graphical interface via a...

CVE-2020-6830

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...