Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-36011

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00161EPSS
Exploits0References2
CVE
CVE
added 2025/09/04 6:34 p.m.22 views

CVE-2025-48549

This CVE (CVE-2025-48549) describes an elevation of privilege in Google Android where a background app can potentially record audio due to a missing permission check. The issue is local and requires no user interaction; exploitation is described as local with high impact. Android's security bulle...

7.8CVSS6.2AI score0.00009EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2025/09/04 6:34 p.m.4 views

CVE-2025-48549

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00009EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/09/04 6:34 p.m.3 views

CVE-2025-48548

In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the privacy indicator due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

0.00009EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2023/05/01 12:0 a.m.7 views

CVE-2023-27035

An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified impacts via embedded website on the canvas page...

6.5CVSS7.6AI score0.08837EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/05/01 12:0 a.m.3 views

PT-2023-20910 · Unknown · Obsidian Canvas

Name of the Vulnerable Software and Affected Versions: Obsidian Canvas version 1.1.9 Description: An issue in Obsidian Canvas allows remote attackers to send desktop notifications, record user audio, and potentially have other unspecified impacts. This can be achieved via an embedded website on t...

7.5CVSS9.5AI score0.08837EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2022/12/15 12:0 a.m.5 views

CVE-2022-32945

An access issue was addressed with additional sandbox restrictions on third-party apps. This issue is fixed in macOS Ventura 13. An app may be able to record audio with paired AirPods...

3.9AI score0.00161EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/08/23 12:0 a.m.0 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions prior to Mozilla Firefox 104, which stems from the fact that websites with access to a microphone can record audio without displaying an audio...

4.3CVSS8.1AI score0.00204EPSS
Exploits0References7
HackRead
HackRead
added 2020/12/16 6:36 p.m.85 views

PyMICROPSIA Windows malware steals browsing data, record audio

By Waqas PyMICROPSIA malware is developed to target Windows operating systems yet it checks for other operating systems, such as “darwin” or “POSIX.” This is a post from HackRead.com Read the original post: PyMICROPSIA Windows malware steals browsing data, record audio...

3AI score
Exploits0
CNVD
CNVD
added 2020/05/18 12:0 a.m.2 views

Pulseaudio Access Control Bypass Vulnerability

PulseAudio is an open source audio system for POSIX OS. The system is primarily used for audio transmission, among other things. A security vulnerability exists in PulseAudio. An attacker could exploit this vulnerability to bypass access control and record audio...

3.3CVSS6.8AI score0.00044EPSS
Exploits0References1
Prion
Prion
added 2020/03/10 8:15 p.m.10 views

Information disclosure

In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

4.9CVSS5.3AI score0.00013EPSS
Exploits0References1Affected Software1
n0where
n0where
added 2017/03/02 8:24 p.m.20 views

Fully Featured Backdoor – Telegram C&C: BrainDamage

A python based backdoor which uses Telegram as C&C server. Features Persistance USB spreading Port Scanner Router Finder Run shell commands Keylogger Insert keystrokes Record audio Webserver Screenshot logging Download files in the host Execute shutdown, restart, logoff, lock Send drive tree...

0.1AI score
Exploits0References2
OSV
OSV
added 2016/11/25 4:59 p.m.0 views

UBUNTU-CVE-2016-6715

An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could allow a local malicious application to record audio without the user's permission. This issue is rated as...

5.5CVSS7.3AI score0.00041EPSS
Exploits0References3
Rows per page
Query Builder