Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-42468 PoC — Color Phone 安全漏洞

Source
https://github.com/actuator/com.cutestudio.colordialer
Associated Vulnerability
Title:Color Phone 安全漏洞 (CVE-2023-42468)
Description:The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application (without any permissions) can craft an intent targeting com.cutestudio.dialer.activities.DialerActivity via the android.intent.action.CALL action in conjunction with a tel: URI, thereby placing a phone call.
Description
CVE-2023-42468
File Snapshot

 [4.0K]  /data/pocs/f537c8e0dc6b033f89eede9374e3afe4c180dae2
├── [2.5K]  CWE-284.md
├── [647K]  Dialer.gif
└── [5.0M]  dialerPOC.apk

0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →