Vulnerabilities in Preinstalled Android Apps Expose PIN Codes and Allow Command Injection

June 2, 2025

Vulnerabilities in Preinstalled Android Apps Expose PIN Codes and Allow Command Injection

Significant vulnerabilities were uncovered in pre-installed applications on Ulefone and Krüger&Matz Android smartphones that expose users to significant risks, including unauthorized factory resets, P …

Published Date:
Jun 02, 2025 (3 hours, 43 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2024-13917

CVE-2024-13916

CVE-2024-13915

Source: Read More

Previous ArticleCritical Bugs Could Spark Takeover of Widely Used Fire Safety OT/ICS Platform

Next Article MediaTek Vulnerabilities Let Attackers Escalate Privileges Without User Interaction

Highlights

CVE-2025-52560 – Kanboard Host Header Token Leak

June 24, 2025

CVE ID : CVE-2025-52560

Published : June 24, 2025, 3:15 a.m. | 2 hours, 1 minute ago

Description : Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard allows password reset emails to be sent with URLs derived from the unvalidated Host header when the application_url configuration is unset (default behavior). This allows an attacker to craft a malicious password reset link that leaks the token to an attacker-controlled domain. If a victim (including an administrator) clicks the poisoned link, their account can be taken over. This affects all users who initiate a password reset while application_url is not set. This issue has been patched in version 1.2.46.

Severity: 8.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

Vulnerabilities in Preinstalled Android Apps Expose PIN Codes and Allow Command Injection

Vulnerabilities in Preinstalled Android Apps Expose PIN Codes and Allow Command Injection

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

CVE-2025-52896 – Frappe Cross-Site Scripting (XSS) via Data Import Vulnerability

CVE-2025-6488 – WordPress isMobile Stored Cross-Site Scripting Vulnerability

The Elder Scrolls 4: Oblivion Remastered PC system requirements and specs — Can your computer run this refined RPG classic?

Build Products that Stick

CVE-2025-52560 – Kanboard Host Header Token Leak

CVE-2025-53833 – “LaRecipe Server-Side Template Injection Vulnerability”

CVE-2025-6278 – Upsonic Path Traversal Vulnerability

Visa preps AI-ready credit cards for automated shopping transactions

Vulnerabilities in Preinstalled Android Apps Expose PIN Codes and Allow Command Injection

Vulnerabilities in Preinstalled Android Apps Expose PIN Codes and Allow Command Injection

Related Posts