django-unicorn affected by component state manipulation via unvalidated attribute access

Summary Component state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modify internal attributes such as templatename or trigger protected methods. Vulnerability...

EUVD-2016-4897

Malware in sbrugna...

CVE-2016-3884

server/notification/NotificationManagerService.java in the Notification Manager Service in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 lacks uid checks, which allows attackers to bypass intended restrictions on method calls via a crafted application, aka internal bug 29421441...

PT-2016-5716

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-09-01 patchday Description The issue is related to a lack of uid checks in the Notification Manager Service, specifically in the server/notification/NotificationManagerService.java file. This allows attackers to...