Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CM Browser: HTTPS URL Leak

blog.quarkslab.com | research | #android | #privacy | #vulnerability | #https | #browser | #cmbrowser

Summary

A vulnerability in Cheetah Mobile's CM Browser (50M+ installs) sends a device's full HTTPS URLs and query parameters to a remote server despite encrypted transport, leaking browsing activity.
Published
Collected

original ↗

Related coverage

  1. Security audit of Mithril Security BlindAI (blog.quarkslab.com)
  2. Secure Messaging Apps and Group Protocols, Part 2 (blog.quarkslab.com)
  3. Secure Messaging Apps and Group Protocols, Part 1 (blog.quarkslab.com)
  4. Audit of the MimbleWimble Integration Inside Litecoin (blog.quarkslab.com)
  5. Mattermost End-to-End Encryption Plugin (blog.quarkslab.com)
  6. Audit of Session Secure Messaging Application (blog.quarkslab.com)

back