CVE-2024-49722 - How a Confused Deputy in `EditUserPhotoController.java` Can Leak Avatars Across Android Users
In June 2024, a significant Android security vulnerability was identified and published as CVE-2024-49722. This local information disclosure flaw occurs when one Android user can
CVE-2024-49728 - How A Bluetooth Bug In Android Leaks Your Private Media Across Users
In June 2024, Google disclosed CVE-2024-49728, a critical vulnerability affecting Android’s Bluetooth file sharing (OBEX) functionality. The bug allows apps on a “non-owner” profile
CVE-2024-40653 - How a Service Logic Bug in Android Could Let Apps Keep Permissions Forever
In June 2024, a new Android vulnerability was publicly disclosed: CVE-2024-40653. This bug centers on a logic error in the ConnectionServiceWrapper.java file, part of
CVE-2025-55177 - How WhatsApp’s Device Sync Flaw Exposed iOS and Mac Users to Remote Attacks
In June 2025, security researchers and WhatsApp themselves revealed a significant flaw affecting WhatsApp for iOS, WhatsApp Business for iOS, and WhatsApp for Mac. Tracked
CVE-2025-57819 - Exploiting Unauthenticated Admin Access in FreePBX (Endpoint 15, 16, 17) – Details & Practical Attack Scenarios
FreePBX is a popular open-source VoIP system, widely used for managing voice communications in organizations. It offers a web-based interface for administering PBX functionality. But
Episode
00:00:00
00:00:00