PT-2025-4187 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR Feb-2025 Release 1 Description: The issue concerns an improper export of Android application components in Settings, allowing local attackers to enable ADB. This could potentially be exploited by attackers with...

CVE-2024-25344

Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings+company.php, settingsdefaults.php,settingsintegrations.php,...

Cross site scripting

Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings+company.php, settingsdefaults.php,settingsintegrations.php,...

PT-2024-20894 · Unknown · Itflow.Org

Name of the Vulnerable Software and Affected Versions: ITFlow.org versions prior to commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the settings.php,...