EUVD-2014-4806

Malware in sbrugna...

EUVD-2014-6850

Malware in sbrugna...

EUVD-2014-6531

Malware in sbrugna...

EUVD-2014-6670

Malware in sbrugna...

EUVD-2019-5898

Malware in sbrugna...

EUVD-2014-6556

Malware in sbrugna...

CVE-2019-14759

An issue was discovered in KaiOS 1.0, 2.5, and 2.5.1. The pre-installed Radio application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Radio application. At a bare minimum, this allows an attacker to take control over the Radio...

CVE-2019-14759

An issue was discovered in KaiOS 1.0, 2.5, and 2.5.1. The pre-installed Radio application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Radio application. At a bare minimum, this allows an attacker to take control over the Radio...

CVE-2019-14759

An issue was discovered in KaiOS 1.0, 2.5, and 2.5.1. The pre-installed Radio application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Radio application. At a bare minimum, this allows an attacker to take control over the Radio...

CVE-2019-14759

An issue was discovered in KaiOS 1.0, 2.5, and 2.5.1. The pre-installed Radio application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Radio application. At a bare minimum, this allows an attacker to take control over the Radio...

CVE-2019-14759: Improper Neutralization of Input During Web Page Generation

An issue was discovered in KaiOS 1.0, 2.5, and 2.5.1. The pre-installed Radio application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Radio application. At a bare minimum, this allows an attacker to take control over the Radio...

PT-2020-9597

Name of the Vulnerable Software and Affected Versions KaiOS versions 1.0 through 2.5.1 Description The pre-installed Radio application in KaiOS is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Radio application, allowing them to take...

NDR Radio - External URLs, KeyStore usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application NDR Radio published at the 'play' market has multiple vulnerabilities...

POC Android botnet - Command and Control Channel over SMS

POC Android botnet - Command and Control Channel over SMS To avoid detection, this proof-of-concept code utilizes the Short Messaging Service SMS as a command & control channel. This adds fault tolerance because, if a smartphone is not available on the GSM network due to being powered off or out...