Security feature bypass

The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171C00 have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability...

CVE-2018-7925

The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171C00 have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability...

CVE-2018-7925

CVE-2018-7925 relates to a lock-screen bypass vulnerability in the radio module of Huawei smartphones (Emily-AL00A). Affected versions are before 8.1.0.171(C00). The issue allows an unauthenticated attacker to bypass the lock screen by initiating a third-party input method app through specific ac...

November 13, 2018—KB4467708 (OS Build 17763.134)

None None...

PT-2018-18326

Name of the Vulnerable Software and Affected Versions: Huawei Emily-AL00A versions prior to 8.1.0.171C00 Description: The issue affects the radio module, allowing an unauthenticated attacker to bypass the lock screen by starting a third-party input method app through specific operations...

CVE-2018-7925: Incorrect Authorization

The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171C00 have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability...

CVE-2018-19193

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

CVE-2018-19193

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

PT-2018-14853

Name of the Vulnerable Software and Affected Versions XiaoCms version 20141229 Description An issue was discovered that allows for XSS via the largest input box on the "New news" screen. Recommendations For XiaoCms version 20141229, consider restricting access to the "New news" screen until a fix...

CVE-2018-19193: Improper Neutralization of Input During Web Page Generation

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

Advanced tools: Process Hacker

Process Hacker is a very valuable tool for advanced users. It can help them to troubleshoot problems or learn more about specific processes that are running on a certain system. It can help identify malicious processes and tell us more about what they are trying to do. Background information...

SQL Injection Vulnerability in Touch Screen Version of VR Visualization and Intelligent Interactive Teaching Cloud Platform of One100

ChuangOne 100VR visualization intelligent interactive teaching cloud platform is based on the Phoenix ChuangOne virtual reality three-dimensional interactive engine running network VR simulation experiments in three-dimensional interactive environment, can realize a large number of parallel users...

Huawei Emily-AL00A cell phone lock screen bypass vulnerability

Emily-AL00A is a smartphone launched by Huawei. A lock screen bypass vulnerability exists in the radio module of the Huawei Emily-AL00A phone. An unauthenticated attacker can exploit this vulnerability to bypass the lock screen and launch a third-party input method installed on the phone via...

CVE-2018-9458

In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional executio...

X (Formerly Twitter): Incorrect details on OAuth permissions screen allows DMs to be read without permission

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! Summary: The OAuth screen can be tricke...

Denial of Service Vulnerability in KsysCall.sys Driver of JM Firewall (CNVD-2018-24683)

Jiangmin Firewall is a network security protection tool designed to address the safety of individual users on the Internet, the product incorporates advanced network access dynamic monitoring technology to thoroughly solve the invasion of hacker attacks, Trojan horse programs and Internet viruses...

Denial of Service Vulnerability in KsysCall.sys Driver of JM Firewall

Jiangmin Firewall is a network security protection tool designed to address the safety of individual users on the Internet, the product incorporates advanced network access dynamic monitoring technology to thoroughly solve the invasion of hacker attacks, Trojan horse programs and Internet viruses...

Denial of Service Vulnerability in WIFI Sharing Wizard v5.0.0919

WIFI Sharing Wizard is a WIFI sharing software. WIFI Sharing Wizard v5.0.0919 suffers from a denial of service vulnerability. An attacker can exploit the vulnerability to cause a computer to blue screen, resulting in a denial of service...

Denial of Service Vulnerability in KsysCall.sys Driver of JM Firewall (CNVD-2018-24703)

Jiangmin Firewall is a network security protection tool designed to address the safety of individual users on the Internet, the product incorporates advanced network access dynamic monitoring technology to thoroughly solve the invasion of hacker attacks, Trojan horse programs and Internet viruses...

PT-2018-19018

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 8.1 Description The issue concerns possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege, revealing the user's keypresses while the screen was...