地图 / [VK Android] Access to app protected components leads to arbitrary code execution

[VK Android] Access to app protected components leads to arbitrary code execution

代码执行 / Unlabeled / #1095633

厂商: VK.com
严重程度: 未评级
赏金: —
弱点: Unlabeled
研究员: @bagipro
披露日期: 2021-05-27
资产: com.vkontakte.android
CVE: —

该报告还没有中文解读。

时间线

2021-02-04报告提交
2021-05-27公开披露

阅读 HackerOne 原文 ↗作者 @bagipro · 版权归作者与 VK.com 所有

同类报告

CVE-2020-8913 - Persistent arbitrary code execution in Android's Google Play Core Library: details, explanation and the PoCGoogle · —Remote code execution [CVE-2023-36845]MTN Group · 2024-10-09 Remote Code Execution on Proxy Service (as root)██████ · —XSS Vulnerability on Pressable/Atomic Hosting Platform via unescaped admin notices leads to code executionAutomattic · 2026-02-18 Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)Fastify · 2025-05-28 Reflected XSS and Server Side Template Injection in all HubSpot CMSesHubSpot Inactive · —