PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Android Application Diffing: CVE-2019-10875 Inspection

blog.quarkslab.com | vulnerability | CVE-2019-10875 | #android | #phishing | #vulnerability | #binary-diffing | #cve-2019-10875 | #mint-browser
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Using binary diffing to locate the CVE-2019-10875 patch in Xiaomi's Mint Browser — a URL-bar spoofing bug (fixed in 1.6.3) that could be abused in phishing campaigns.
CVE
CVE-2019-10875
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · volexity.com
OceanLotus: Extending Cyber Espionage Operations Through Fake Websites
Since Volexity’s 2017 discovery that OceanLotus was behind a sophisticated massive digital surveillance campaign, the threat group has continued to evolve. In 2019, Volexity gave a presentation at RSA Conference […]
vulnerability · blog.quarkslab.com
Snapshotting our way to CVE-2026-9539
This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.
vulnerability · blog.quarkslab.com
MbedTLS Security Audit
At the request of the Open Source Technology Improvement Fund (OSTIF), Quarkslab performed a security audit of mbedTLS, evaluating the security of the changes in version 4.0.
vulnerability · blog.quarkslab.com
Analysis of MS16-104: .URL files Security Feature Bypass (CVE-2016-3353)
CVE-2016-3353, a .URL file security feature bypass in IE 11 fixed by MS16-104: binary diffing ieframe.dll to locate the patch, understanding the InternetShortcut warning logic, and building a PoC.
vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
Back