https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:41:04 +0000 https://cve.radiocsirt.org/vuln/cve-2024-13917 <p><strong>Affected:</strong> Kruger&amp;Matz com.pri.applock</p> <p>An application &#34;com.pri.applock&#34;, which is pre-loaded on Kruger&amp;Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.pri.applock.LockUI“ activity allows any other malicious application, with no granted Android system permissions, to inject an arbitrary intent with system-level privileges to a protected application. One must know the protecting PIN number (it might be revealed by exploiting CVE-2024-13916) or ask the user to provide it.</p> <p>Only version (version name: 13, version code: 33) was tested and confirmed to have this vulnerability. Application update was released in April 2025.</p> <p><strong>Affected:</strong> Kruger&amp;Matz com.pri.applock</p> <p>An application &#34;com.pri.applock&#34;, which is pre-loaded on Kruger&amp;Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.pri.applock.LockUI“ activity allows any other malicious application, with no granted Android system permissions, to inject an arbitrary intent with system-level privileges to a protected application. One must know the protecting PIN number (it might be revealed by exploiting CVE-2024-13916) or ask the user to provide it.</p> <p>Only version (version name: 13, version code: 33) was tested and confirmed to have this vulnerability. Application update was released in April 2025.</p> https://cve.radiocsirt.org/vuln/cve-2024-13917