https://db.gcve.eu/sightings/feed 2026-05-20T15:09:52.381494+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/53982f33-59d2-41de-a8de-20f445deb8d6/export 2026-05-20T15:09:52.928628+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "53982f33-59d2-41de-a8de-20f445deb8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-20135", "type": "seen", "source": "https://t.me/cibsecurity/4761", "content": "ATENTION\u203c New - CVE-2018-20135\n\nSamsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle attack. An attacker may trick Galaxy Apps into using an arbitrary hostname for which the attacker can provide a valid SSL certificate, and emulate the API of the app store to modify existing apps at installation time. The specific flaw involves an HTTP method to obtain the load-balanced hostname that enforces SSL only after obtaining a hostname from the load balancer, and a missing app signature validation in the application XML. An attacker can exploit this vulnerability to achieve Remote Code Execution on the device. The Samsung ID is SVE-2018-12071.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-07T20:38:27.000000Z"} 2019-06-07T20:38:27+00:00