Submit #619037: Boquan DotWallet(com.boquanhash.dotwallet) 2.15.2 Task Hijackinginfo

TitleBoquan DotWallet(com.boquanhash.dotwallet) 2.15.2 Task Hijacking
DescriptionTask Hijacking allows malicious apps to inherit permissions of vulnerable apps and is usually used for phishing login credentials of victims,its used by malicious actors to manipulate or take over tasks in Android, leading to significant vulnerabilities, This vulnerability applies to all Android versions before Android 11. The AndroidManifest.xml configuration needs to be modified to mitigate this attack.
Source⚠️ https://github.com/KMov-g/androidapps/blob/main/com.boquanhash.dotwallet.md
User
 fxizenta (UID 28116)
Submission07/19/2025 18:37 (9 months ago)
Moderation08/04/2025 08:37 (16 days later)
StatusAccepted
VulDB entry318650 [Boquan DotWallet App 2.15.2 on Android com.boquanhash.dotwallet AndroidManifest.xml improper export of android application components]
Points19

Do you want to use VulDB in your project?

Use the official API to access entries easily!