Lucene search
+L

9469 matches found

Openbugbounty
Openbugbounty
•added 2023/10/22 11:38 p.m.•10 views

play-and-collect.de Cross Site Scripting vulnerability OBB-3763856

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2023/10/19 11:38 a.m.•48 views

Google Play Protect Introduces Real-Time Code-Level Scanning for Android Malware

Google has announced an update to its Play Protect with support for real-time scanning at the code level to tackle novel malicious apps prior to downloading and installing them on Android devices. "Google Play Protect will now recommend a real-time app scan when installing apps that have never be...

7AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2023/10/12 11:21 p.m.•3 views

Malware in situs-slot-gacor-pragmatic-play-dijamin-menang-tahun-2023

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/10/12 3:15 p.m.•12 views

CVE-2023-41131

Cross-Site Request Forgery CSRF vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.10 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/12 3:15 p.m.•30 views

CVE-2023-41131

Cross-Site Request Forgery CSRF vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.10 versions...

8.8CVSS5.9AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/12 3:15 p.m.•19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.10 versions...

6.8CVSS8.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/10/12 2:26 p.m.•105 views

CVE-2023-41131

CVE-2023-41131 refers to a CSRF vulnerability in the WordPress plugin Sptify Play Button for WordPress (Jonk @ Follow me Darling Sp tify Play Button) affecting versions

8.8CVSS6.6AI score0.00256EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/10/12 12:00 a.m.•15 views

PT-2023-27815 · WordPress · Jonk @ Follow Me Darling Sp*Tify Play Button

Name of the Vulnerable Software and Affected Versions: Jonk @ Follow me Darling Sptify Play Button for WordPress plugin versions = 2.10 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performi...

8.8CVSS8.5AI score0.00256EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/10/12 12:00 a.m.•16 views

WordPress plugin Sp*tify Play Button Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.6AI score0.00256EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/12 12:00 a.m.•6 views

CVE-2023-41131: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.10 versions...

8.8CVSS7.8AI score0.00256EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2023/10/07 6:47 p.m.•13 views

gt4-play.co.uk Cross Site Scripting vulnerability OBB-3728897

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
•added 2023/10/06 7:15 p.m.•12 views

CVE-2023-21266

In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00121EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/06 7:15 p.m.•63 views

CVE-2023-21266

In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.8AI score0.00121EPSS
SaveExploits0References2
Prion
Prion
•added 2023/10/06 7:15 p.m.•41 views

Design/Logic Flaw

In killBackgroundProcesses of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

4.3CVSS7.7AI score0.00121EPSS
SaveExploits0References2Affected Software1
osv-ubuntu
osv-ubuntu
•added 2023/10/06 7:15 p.m.•19 views

UBUNTU-CVE-2023-21266

In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00121EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/10/06 7:15 p.m.•38 views

CVE-2023-21266

In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.1AI score0.00121EPSS
SaveExploits0References3
CVE
CVE
•added 2023/10/06 6:48 p.m.•170 views

CVE-2023-21266

CVE-2023-21266 affects Android’s ActivityManagerService.java, describing a permissions bypass that could enable local escalation of privilege with no additional execution privileges required. Exploitation is stated to require no user interaction. The connected documents consistently frame this as...

7.8CVSS7.8AI score0.00121EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/06 12:00 a.m.•2 views

CVE-2023-21266: Undefined Security Weakness

In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00121EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/10/06 12:00 a.m.•20 views

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android suffers from a security vulnerability that originates in killBackgroundProcesses in ActivityManagerService.java, which can be exploited to evade Google Play protections via privilege...

7.8CVSS6.6AI score0.00121EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/10/06 12:00 a.m.•23 views

PT-2023-18047 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permissions bypass in the killBackgroundProcesses function of ActivityManagerService.java, which could allow escaping Google Play protection. This might lead to...

7.8CVSS6.8AI score0.00121EPSS
SaveExploits0References13
Rows per page
Query Builder