3159 | Firefox for Android: LAN Based Intent Triggering |
Insecure intent
Android |
Mozilla |
initstring (@init_string) |
Bug Bounty | 2020-09-15 | 2023-06-13 |
3046 | Firefox for Android: LAN-Based Intent Triggering |
Insecure intent
Android |
Mozilla |
initstring (@init_string) |
Bug Bounty | 2020-11-10 | 2023-06-13 |
2799 | SHAREit Flaw Could Lead to Remote Code Execution |
Android
RCE
MiTM
Man-in-the-Disk attack
Insecure intent
Vulnerable Android content provider |
SHAREit |
Echo Duan |
Bug Bounty | 2021-02-15 | 2023-06-13 |
2706 | TikTok for Android 1-Click RCE |
RCE
XSS
Insecure intent
Android |
TikTok |
Sayed Abdelhafiz (@dPhoeniixx) |
Bug Bounty | 2021-03-18 | 2023-06-13 |
2568 | Exploiting Activity in medium android app |
Insecure intent
Android |
Medium |
Raju kumar (@MrCyberwarrior) |
Bug Bounty | 2021-05-10 | 2023-06-13 |
2490 | Two weeks of securing Samsung devices: Part 1 |
Arbitrary file write
Insecure intent
Android |
Samsung |
Oversecured (@OversecuredInc) |
Bug Bounty | 2021-06-10 | 2023-06-13 |
2472 | Why dynamic code loading could be dangerous for your apps: a Google example |
Arbitrary file write
Insecure intent
Android |
Google |
Oversecured (@OversecuredInc) |
Bug Bounty | 2021-06-17 | 2023-06-13 |
1577 | Samsung Flow - Any App Can Read The External Storage |
Android
Insecure intent |
Samsung |
Ken Gannon (@Yogehi) |
Bug Bounty | 2022-05-04 | 2023-06-13 |
1576 | Samsung Galaxy - Any App Can Install Any App In The Galaxy App Store |
Android
Insecure intent |
Samsung |
Ken Gannon (@Yogehi) |
Bug Bounty | 2022-05-04 | 2023-06-13 |
1043 | Arbitrary File Corruption: End - to - End Encrypted Messaging Application |
Insecure intent
Android |
NA |
Neil Mark Ochea (@nmochea) |
Bug Bounty | 2022-09-23 | 2023-06-13 |
983 | Gcash Vulnerability Walkthrough |
Android
Insecure deeplink
Insecure intent |
Gcash |
Neil Mark Ochea (@nmochea) |
Bug Bounty | 2022-10-10 | 2023-06-13 |
563 | Technical Advisory – Multiple Vulnerabilities in the Galaxy App Store (CVE-2023-21433, CVE-2023-21434) |
Android
Insecure intent
Insecure deeplink
URL validation bypass |
Samsung |
Ken Gannon (@Yogehi) |
Bug Bounty | 2023-01-20 | 2023-06-13 |
539 | How I Found My First Bug in Android App |
Android
Authentication bypass
Insecure intent |
NA |
Barath Stalin |
Bug Bounty | 2023-01-26 | 2023-06-13 |