ASB-A-291281543

In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions due to a permissions bypass. This could lead to local escalation of privilege with user execution privileges needed. User interaction is not needed for exploitation...

ASB-A-376462130

In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-58294

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58294

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58294

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58294

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58294

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58294

Huawei HarmonyOS contains a privilege control vulnerability in the printing module caused by improper privilege control. The issue can affect service confidentiality. Affected component is HarmonyOS’ printing/print module; root cause stated as privilege-control weaknesses. External exploitation d...

EUVD-2025-199849

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58294: Undefined Security Weakness

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2025-199298

Malicious code in @quick-start-soft/quick-markdown-print npm...

EUVD-2025-199184

Malicious code in benmostyn-frame-print npm...

MAL-2025-191071 Malicious code in benmostyn-frame-print (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f0d4b7abe9ddc156e7aa8fd6441240100d81edbc79ad8d29691b1a7f82ab32 The package benmostyn-frame-print was found to contain malicious code. Source: ghsa-malware...

Malicious code in benmostyn-frame-print (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f0d4b7abe9ddc156e7aa8fd6441240100d81edbc79ad8d29691b1a7f82ab32 The package benmostyn-frame-print was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-191306 Malicious code in @quick-start-soft/quick-markdown-print (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e82ae5f39d0c568ce2ebb23ff053c97eba1c0bb306b946c3fefc4c0680b526 The package @quick-start-soft/quick-markdown-print was found to contain malicious code. Source: ghsa-malware...

Exploit for CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the...

EUVD-2025-197934

The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the printAdminPage function. This makes it possible for unauthenticated attackers to update setting...

CVE-2025-12406

The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the printAdminPage function. This makes it possible for unauthenticated attackers to update setting...