EUVD-2014-7772

Malware in sbrugna...

EUVD-2016-4866

Malware in sbrugna...

EUVD-2022-25078

Malicious code in bioql PyPI...

EUVD-2022-6540

Malicious code in bioql PyPI...

CVE-2022-1799

Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release...

CVE-2022-2390

Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain...

Gmail's New Shielded Email Feature Lets Users Create Aliases for Email Privacy

Google appears to be readying a new feature called Shielded Email that allows users to create email aliases when signing up for online services and better combat spam. The feature was first reported by Android Authority last week following a teardown of the latest version of Google Play Services...

Ubiquiti EdgeRouters buffer error vulnerability

Ubiquiti EdgeRouters is a series of edge routers from Ubiquiti USA. A security vulnerability exists in Ubiquiti EdgeRouters and Aircubes that stems from the presence of a heap overflow vulnerability that allows a malicious actor to interrupt UPnP services on the device...

GHSA-CM6R-892J-JV2G Google Play Services SDK leads to apps having incorrectly set mutability flag

Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain...

androidx.camera:camera-mlkit-vision (>=1.2.0-alpha01, <=1.6.0-beta01), androidx.core.uwb:uwb (>=1.0.0-alpha01, <=1.0.0-alpha11) +184 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (>=18.0.0, <=18.0.1)

com.google.android.gms:play-services-basement MAVEN version =18.0.0, =1.2.0-alpha01, =1.0.0-alpha01, =1.0.0-alpha02, =1.1.0-alpha02, =1.0.0-alpha02, =1.0.0-alpha02, =1.0.0-alpha02, =3.26.0, =4.7.1.1, =11.4.2.0, =8.4.3.1, =6.11.0.1, =8.1.3.1, =8.2.4.0 and more Source cves: CVE-2022-2390 Source...

com.google.android.gms:play-services (8.1.0), com.google.android.gms:play-services-ads (8.1.0) +22 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (8.1.0)

com.google.android.gms:play-services-basement MAVEN version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services 8.1.0 -...

com.google.android.gms:play-services-base (17.2.0) potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (17.2.0)

com.google.android.gms:play-services-basement MAVEN version 17.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services-base 17.2.0 Source cves:...

com.google.android.gms:play-services-ads (>=16.0.0, <=17.2.1), com.google.android.gms:play-services-ads-identifier (16.0.0) +102 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (16.0.1)

com.google.android.gms:play-services-basement MAVEN version 16.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services-ads =16.0.0, =16.0.0, =16.0.4,...

com.google.android.gms:play-services (11.4.2), com.google.android.gms:play-services-ads (11.4.2) +56 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (11.4.2)

com.google.android.gms:play-services-basement MAVEN version 11.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services 11.4.2 -...

com.google.android.gms:play-services (8.4.0), com.google.android.gms:play-services-ads (8.4.0) +23 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (8.4.0)

com.google.android.gms:play-services-basement MAVEN version 8.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services 8.4.0 -...

com.google.android.gms:play-services (8.3.0), com.google.android.gms:play-services-ads (8.3.0) +23 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (8.3.0)

com.google.android.gms:play-services-basement MAVEN version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services 8.3.0 -...

com.google.android.gms:play-services-auth-api-phone (>=17.3.0, <=17.5.0), com.google.android.gms:play-services-auth-base (17.1.0) +3 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (17.1.0)

com.google.android.gms:play-services-basement MAVEN version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services-auth-api-phone =17.3.0, =17.1.0...

com.google.android.gms:play-services-base (16.1.0), com.google.android.gms:play-services-measurement (>=16.4.0, <=16.5.0) +10 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (16.2.0)

com.google.android.gms:play-services-basement MAVEN version 16.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services-base 16.1.0 -...

com.google.android.gms:play-services (9.2.0), com.google.android.gms:play-services-ads (9.2.0) +50 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (9.2.0)

com.google.android.gms:play-services-basement MAVEN version 9.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services 9.2.0 -...

androidx.media3:media3-exoplayer-ima (1.0.0-alpha01), com.google.ads.interactivemedia.v3:interactivemedia (>=3.22.2, <=3.25.1) +64 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (17.6.0)

com.google.android.gms:play-services-basement MAVEN version 17.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - androidx.media3:media3-exoplayer-ima 1.0.0-alpha01 -...