40 matches found
CVE-2024-23700
PoC for CVE-2024-23700、サイレントに次の権限を取得可能：連絡先、SMS、カレンダー、通話ログ、ボイスメールの読み取り/書き込み、発信または着信応答、通話設定の操作、他のアプリからの通知のアクセスと制御、近くのデバイスの制御、マイクへのアクセス（音声録音）、デバイス識別子の取得、バックグラウンド制限の回避。 これは、悪意のあるアプリがユーザー操作なしでコンパニオンデバイスの関連付けを確立できる権限昇格の脆弱性を利用して行われます。 Android セキュリティ重要度: 重大...
CVE-2026-28593
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-73950
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28593
Android is affected via the getItemList method in SettingsFragment.java , where a misleading or insufficient user interface enables a user interaction bypass . This allows local escalation of privilege with no additional execution privileges required and without user interaction. The vulnerabilit...
CVE-2026-28593
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88210
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-388272624
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-36531
A flaw in Naxclow's platform’s onboarding workflow allows an attacker to replay a confirm-then-bind sequence to silently reassign a device to an arbitrary account. Because the affected endpoints validate request signatures but do not confirm legitimate ownership, an attacker with any account can...
CVE-2026-0097
In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-446114623
In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-30796
Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...
PT-2026-41723
Name of the Vulnerable Software and Affected Versions Summarize versions prior to 0.15.1 Description A missing authorization issue allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. By using malicious page or...
CVE-2019-2221
In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements due to incorrect handling of top activities in INITIALIZING state. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti...
CVE-2019-2220
In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend. This could lead to local information disclosure no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
EUVD-2016-7621
Malware in sbrugna...
EUVD-2019-18670
Malware in sbrugna...
EUVD-2017-0846
Malware in sbrugna...
EUVD-2017-0999
Malware in sbrugna...