Lucene search
+L

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 3:37 p.m.•28 views

Malicious code in bigops-outgoing-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536ee260eadf72447df4e01eb549a86779846d21b3b9b539b486f2bcd65ba750 On require of index.js the package loads runtime.js, which selects a platform-specific asset path and fetches an opaque binary from one of four...

5.5AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2025/07/21 3:15 p.m.•17 views

CVE-2025-43977

The com.skt.prod.dialer application through 12.5.0 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.skt.prod.dialer.activities.outgoingcall.OutgoingCallInternalBroadcaster component...

5.5CVSS5.8AI score0.00165EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/04/19 12:00 a.m.•20 views

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates in the getNumberFromCallIntent obfuscation agent of the NewOutgoingCallIntentBroadcaster.java component, which can be exploited by an...

5.5CVSS6.1AI score0.00082EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2023/01/01 12:00 a.m.•57 views

ASB-A-246933785

In onCreate of PhoneAccountSettingsActivity.java and related files, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...

7.8CVSS7.3AI score0.00125EPSS
SaveExploits0References2
Rows per page
Query Builder