A vulnerability in Firefox for Android allows control of the browser via public Wi-Fi
A serious vulnerability has been identified in the implementation of the SSDP protocol in Firefox for Android, which is used for discovering network services in the local network. This vulnerability allows an attacker on the same local or wireless network to respond to Firefox's probing requests with a UPnP XML 'LOCATION' message containing intent commands, which can open an arbitrary URI in the browser or trigger handlers of other applications. […]
