https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:28:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-187116 EUVD-2026-187116 https://cve.radiocsirt.org/vuln/euvd-2026-187116 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44129 <p>The vulnerability is that the Messaging (&#34;com.android.mms&#34;) app patched by LG forwards attacker-controlled intents back to the attacker in the exported &#34;com.android.mms.ui.QClipIntentReceiverActivity&#34; activity. The attacker can abuse this functionality by launching this activity and then sending a broadcast with the &#34;com.lge.message.action.QCLIP&#34; action. The attacker can send, e.g., their own data/clipdata and set Intent.FLAG_GRANT_* flags. After the attacker received that intent in the &#34;onActivityResult()&#34; method, they would have access to arbitrary content providers that have the `android:grantUriPermissions=&#34;true&#34;` flag set.</p> <p>The vulnerability is that the Messaging (&#34;com.android.mms&#34;) app patched by LG forwards attacker-controlled intents back to the attacker in the exported &#34;com.android.mms.ui.QClipIntentReceiverActivity&#34; activity. The attacker can abuse this functionality by launching this activity and then sending a broadcast with the &#34;com.lge.message.action.QCLIP&#34; action. The attacker can send, e.g., their own data/clipdata and set Intent.FLAG_GRANT_* flags. After the attacker received that intent in the &#34;onActivityResult()&#34; method, they would have access to arbitrary content providers that have the `android:grantUriPermissions=&#34;true&#34;` flag set.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-44129 https://cve.radiocsirt.org/vuln/ghsa-v38f-6chf-2vhr <p>The vulnerability is that the Messaging (&#34;com.android.mms&#34;) app patched by LG forwards attacker-controlled intents back to the attacker in the exported &#34;com.android.mms.ui.QClipIntentReceiverActivity&#34; activity. The attacker can abuse this functionality by launching this activity and then sending a broadcast with the &#34;com.lge.message.action.QCLIP&#34; action. The attacker can send, e.g., their own data/clipdata and set Intent.FLAG_GRANT_* flags. After the attacker received that intent in the &#34;onActivityResult()&#34; method, they would have access to arbitrary content providers that have the `android:grantUriPermissions=&#34;true&#34;` flag set.</p> <p>The vulnerability is that the Messaging (&#34;com.android.mms&#34;) app patched by LG forwards attacker-controlled intents back to the attacker in the exported &#34;com.android.mms.ui.QClipIntentReceiverActivity&#34; activity. The attacker can abuse this functionality by launching this activity and then sending a broadcast with the &#34;com.lge.message.action.QCLIP&#34; action. The attacker can send, e.g., their own data/clipdata and set Intent.FLAG_GRANT_* flags. After the attacker received that intent in the &#34;onActivityResult()&#34; method, they would have access to arbitrary content providers that have the `android:grantUriPermissions=&#34;true&#34;` flag set.</p> https://cve.radiocsirt.org/vuln/ghsa-v38f-6chf-2vhr https://cve.radiocsirt.org/vuln/gsd-2023-44129 gsd-2023-44129 https://cve.radiocsirt.org/vuln/gsd-2023-44129