CVE-2023-46918
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-46918
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Phlox com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus has an Android manifest file that contains an entry with the android:allowBackup attribute set to true. This could be leveraged by an attacker with physical access to the device.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Fedir Tsapana Simple HTTP Server PLUS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Fedir Tsapana Simple HTTP Server PLUS是Fedir Tsapana公司的一个允许您运行具有静态内容的小型本地 HTTP 服务器的应用程序。 Fedir Tsapana Simple HTTP Server PLUS 1.8.1-plus及之前版本存在安全漏洞，该漏洞源于应用程序包含硬编码的 AES 加密密钥，有权访问应用程序源代码或二进制文件的攻击者可以提取此密钥，从而使加密机制失效。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2023-46918
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | CVE-2023-46918 | CVE-2023-46919 | https://github.com/actuator/com.phlox.simpleserver | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-46918
请登录查看更多情报信息。
Other References for CVE-2023-46918 (1)
Same Patch Batch · n/a · 2023-12-27 · 16 CVEs total
| CVE-2023-40038 | CommScope Arris DG860A 安全漏洞 | |
| CVE-2023-43481 | TCL BrowseHere 安全漏洞 | |
| CVE-2023-43955 | TV Bro 安全漏洞 | |
| CVE-2023-46919 | SFedir Tsapana Simple HTTP Server PLUS 安全漏洞 | |
| CVE-2023-47882 | Kami YI HOME 安全漏洞 | |
| CVE-2023-47883 | vlady-mix TV Browser 安全漏洞 | |
| CVE-2023-49000 | ArtistScope ArtisBrowser 安全漏洞 | |
| CVE-2023-49001 | Indi Browser 安全漏洞 | |
| CVE-2023-49002 | Phone Dialer-voice Call Dialer 安全漏洞 | |
| CVE-2023-49003 | Simple Dialer 安全漏洞 | |
| CVE-2023-51074 | Jayway JsonPath 安全漏洞 | |
| CVE-2023-51075 | Hutool 安全漏洞 | |
| CVE-2023-51079 | MVEL 安全漏洞 | |
| CVE-2023-51080 | Hutool 安全漏洞 | |
| CVE-2023-51084 | hyavijava 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2023-46918
No comments yet