EUVD-2022-31941

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer Advanced Updater are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an...

CVE-2021-41067

An issue was discovered in Listary through 6. Improper implementation of the update process leads to the download of software updates with a /check-update HTTP-based connection. This can be exploited with MITM techniques. Together with the lack of package validation, it can lead to manipulation o...

Man-in-the-middle attack vulnerability in the latest version of Zhihu's Android client

Zhihu Android client is an online question and answer platform designed for Android users. The latest version of Zhihu's Android client has a security vulnerability in the "Check for Updates" function, which allows attackers to exploit the vulnerability to download malicious programs that cause...