agentprime: CWE-926Every new CWE-926 Advisory and CVE.https://agentprime.io/CVE-2026-54376: VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijackinghttps://agentprime.io/advisories/CVE-2026-54376/https://agentprime.io/advisories/CVE-2026-54376/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:01:47 GMTCVECVE-2026-107059: An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile, bypassing authentication.https://agentprime.io/advisories/CVE-2026-107059/https://agentprime.io/advisories/CVE-2026-107059/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVECVE-2026-107057: An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.https://agentprime.io/advisories/CVE-2026-107057/https://agentprime.io/advisories/CVE-2026-107057/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVEcriticalCVE-2026-107051: Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate another user's FHEM home-automation control configurations.https://agentprime.io/advisories/CVE-2026-107051/https://agentprime.io/advisories/CVE-2026-107051/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVECVE-2026-107048: An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request.https://agentprime.io/advisories/CVE-2026-107048/https://agentprime.io/advisories/CVE-2026-107048/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVEcriticalCVE-2026-107046: A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers to scan internal resources via supplying a crafted URL.https://agentprime.io/advisories/CVE-2026-107046/https://agentprime.io/advisories/CVE-2026-107046/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVECVE-2026-107043: Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism.https://agentprime.io/advisories/CVE-2026-107043/https://agentprime.io/advisories/CVE-2026-107043/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVEcriticalCVE-2026-107041: Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Se…https://agentprime.io/advisories/CVE-2026-107041/https://agentprime.io/advisories/CVE-2026-107041/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVECVE-2026-107040: Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.https://agentprime.io/advisories/CVE-2026-107040/https://agentprime.io/advisories/CVE-2026-107040/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVEcriticalCVE-2026-107038: Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.https://agentprime.io/advisories/CVE-2026-107038/https://agentprime.io/advisories/CVE-2026-107038/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVEcriticalCVE-2026-107036: Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker blocker mechanism of the application.https://agentprime.io/advisories/CVE-2026-107036/https://agentprime.io/advisories/CVE-2026-107036/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVECVE-2026-107033: Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and modify another user's task database.https://agentprime.io/advisories/CVE-2026-107033/https://agentprime.io/advisories/CVE-2026-107033/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVECVE-2026-107032: Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.https://agentprime.io/advisories/CVE-2026-107032/https://agentprime.io/advisories/CVE-2026-107032/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVEcriticalCVE-2026-107030: Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (One-Time Password) mechanism, causing a desynchronization of…https://agentprime.io/advisories/CVE-2026-107030/https://agentprime.io/advisories/CVE-2026-107030/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVECVE-2026-107027: Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.https://agentprime.io/advisories/CVE-2026-107027/https://agentprime.io/advisories/CVE-2026-107027/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVEcriticalCVE-2026-107025: Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export the application's data.https://agentprime.io/advisories/CVE-2026-107025/https://agentprime.io/advisories/CVE-2026-107025/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVECVE-2026-107021: Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitrarily read flashcards across the user's entire m…https://agentprime.io/advisories/CVE-2026-107021/https://agentprime.io/advisories/CVE-2026-107021/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVEcriticalCVE-2026-107019: Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS import…https://agentprime.io/advisories/CVE-2026-107019/https://agentprime.io/advisories/CVE-2026-107019/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVECVE-2026-107014: Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user's' note database.https://agentprime.io/advisories/CVE-2026-107014/https://agentprime.io/advisories/CVE-2026-107014/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 00:00:00 GMTCVEcriticalCVE-2026-113385: LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java Class.forName improper export of android application componentshttps://agentprime.io/advisories/CVE-2026-113385/https://agentprime.io/advisories/CVE-2026-113385/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 11:15:14 GMTCVECVE-2026-21127: Exported Android component in Samsung Mobile Samsung Accounthttps://agentprime.io/advisories/CVE-2026-21127/https://agentprime.io/advisories/CVE-2026-21127/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 04:57:44 GMTCVECVE-2026-68928: Acode: Exported TerminalService (bundled terminal plugin) lets any installed app execute arbitrary shell commands as Acodehttps://agentprime.io/advisories/CVE-2026-68928/https://agentprime.io/advisories/CVE-2026-68928/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:40:12 GMTCVECVE-2026-86701: Exported Android component in NTT DOCOMO BUSINESS, Inc. ManabiPocket for Parentshttps://agentprime.io/advisories/CVE-2026-86701/https://agentprime.io/advisories/CVE-2026-86701/CVSS 1.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 05:51:38 GMTCVECVE-2026-81301: Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file accesshttps://agentprime.io/advisories/CVE-2026-81301/https://agentprime.io/advisories/CVE-2026-81301/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 15:51:38 GMTCVECVE-2026-18994: Exported Android component in Lenovo File Manager Applicationhttps://agentprime.io/advisories/CVE-2026-18994/https://agentprime.io/advisories/CVE-2026-18994/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 21:00:25 GMTCVECVE-2026-21113: Exported Android component in Samsung Mobile Visual Voicemailhttps://agentprime.io/advisories/CVE-2026-21113/https://agentprime.io/advisories/CVE-2026-21113/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 04:48:03 GMTCVECVE-2026-21108: Exported Android component in Samsung Mobile Bixby Touchhttps://agentprime.io/advisories/CVE-2026-21108/https://agentprime.io/advisories/CVE-2026-21108/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 04:47:58 GMTCVECVE-2026-45528: Exported Android component in Google Androidhttps://agentprime.io/advisories/CVE-2026-45528/https://agentprime.io/advisories/CVE-2026-45528/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 18:05:40 GMTCVECVE-2026-20516: Exported Android component in MediaTek, Inc. MediaTek chipsethttps://agentprime.io/advisories/CVE-2026-20516/https://agentprime.io/advisories/CVE-2026-20516/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 01:57:20 GMTCVECVE-2026-21081: Exported Android component in Samsung Mobile SamsungPassAutofillhttps://agentprime.io/advisories/CVE-2026-21081/https://agentprime.io/advisories/CVE-2026-21081/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 07:43:49 GMTCVECVE-2026-21063: Exported Android component in Samsung Mobile Deviceshttps://agentprime.io/advisories/CVE-2026-21063/https://agentprime.io/advisories/CVE-2026-21063/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 07:40:29 GMTCVECVE-2026-21059: Exported Android component in Samsung Mobile Deviceshttps://agentprime.io/advisories/CVE-2026-21059/https://agentprime.io/advisories/CVE-2026-21059/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 07:39:44 GMTCVECVE-2026-44965: Exported Android component in Datadog Android Apphttps://agentprime.io/advisories/CVE-2026-44965/https://agentprime.io/advisories/CVE-2026-44965/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 18:02:35 GMTCVECVE-2026-47363: Exported Android component in Datadog Android Apphttps://agentprime.io/advisories/CVE-2026-47363/https://agentprime.io/advisories/CVE-2026-47363/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 18:02:35 GMTCVECVE-2026-47361: Exported Android component in Datadog Android Apphttps://agentprime.io/advisories/CVE-2026-47361/https://agentprime.io/advisories/CVE-2026-47361/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 18:02:34 GMTCVECVE-2026-18604: textPlus Text Message and Call App com.gogii.textplus DialerActivity improper export of android application componentshttps://agentprime.io/advisories/CVE-2026-18604/https://agentprime.io/advisories/CVE-2026-18604/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 15:45:09 GMTCVECVE-2026-20470: Exported Android component in MediaTek, Inc. MediaTek chipsethttps://agentprime.io/advisories/CVE-2026-20470/https://agentprime.io/advisories/CVE-2026-20470/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:05:47 GMTCVECVE-2026-57848: Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validationhttps://agentprime.io/advisories/CVE-2026-57848/https://agentprime.io/advisories/CVE-2026-57848/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 18 Jul 2026 19:15:18 GMTCVECVE-2026-12960: Exported Android component in ASUS Router apphttps://agentprime.io/advisories/CVE-2026-12960/https://agentprime.io/advisories/CVE-2026-12960/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 02:00:14 GMTCVECVE-2026-54318: Home Assistant: Exported BroadcastReceiver allows local apps to spoof device locationhttps://agentprime.io/advisories/CVE-2026-54318/https://agentprime.io/advisories/CVE-2026-54318/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 17:40:28 GMTCVECVE-2025-68713: An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9.https://agentprime.io/advisories/CVE-2025-68713/https://agentprime.io/advisories/CVE-2025-68713/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 00:00:00 GMTCVECVE-2026-44279: Exported Android component in Fortinet FortiTokenAndroidhttps://agentprime.io/advisories/CVE-2026-44279/https://agentprime.io/advisories/CVE-2026-44279/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 16:54:09 GMTCVECVE-2026-3291: Samsung Print Service Plugin – Potential Information Disclosurehttps://agentprime.io/advisories/CVE-2026-3291/https://agentprime.io/advisories/CVE-2026-3291/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 21:53:03 GMTCVECVE-2025-15464: KL-001-2026-01: yintibao Fun Print Mobile Unauthorized Access via Context Hijackinghttps://agentprime.io/advisories/CVE-2025-15464/https://agentprime.io/advisories/CVE-2025-15464/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Jan 2026 21:01:31 GMTCVECVE-2025-14517: Yalantis uCrop AndroidManifest.xml UCropActivity improper export of android application componentshttps://agentprime.io/advisories/CVE-2025-14517/https://agentprime.io/advisories/CVE-2025-14517/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Dec 2025 14:02:09 GMTCVECVE-2025-10722: SKTLab Mukbee App com.dw.android.mukbee AndroidManifest.xml improper export of android application componentshttps://agentprime.io/advisories/CVE-2025-10722/https://agentprime.io/advisories/CVE-2025-10722/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Sep 2025 17:32:10 GMTCVECVE-2025-10721: Webull Investing & Trading App AndroidManifest.xml improper export of android application componentshttps://agentprime.io/advisories/CVE-2025-10721/https://agentprime.io/advisories/CVE-2025-10721/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Sep 2025 17:32:07 GMTCVECVE-2025-10718: Ooma Office Business Phone App com.ooma.office2 improper export of android application componentshttps://agentprime.io/advisories/CVE-2025-10718/https://agentprime.io/advisories/CVE-2025-10718/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Sep 2025 16:02:06 GMTCVECVE-2025-10717: intsig CamScanner App com.intsig.camscanner AndroidManifest.xml improper export of android application componentshttps://agentprime.io/advisories/CVE-2025-10717/https://agentprime.io/advisories/CVE-2025-10717/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Sep 2025 14:32:08 GMTCVECVE-2025-10716: Creality Cloud App com.cxsw.sdprinter AndroidManifest.xml improper export of android application componentshttps://agentprime.io/advisories/CVE-2025-10716/https://agentprime.io/advisories/CVE-2025-10716/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Sep 2025 14:32:06 GMTCVE