306 matches found
ASB-A-193149550
In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset Protections. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
SakuraPanel Cross-Site Scripting Vulnerability
SakuraPanel is an open source, Frp-based intranet penetration management panel application. a cross-site scripting vulnerability exists in SakuraPanel, which stems from an exit function in the product/master/core/PostHandler.php file that does not validate data. An attacker could print...
frp-bridge.com Cross Site Scripting vulnerability OBB-2227143
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2020-35550
An issue was discovered on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. Attackers can bypass Factory Reset Protection FRP via StatusBar. The Samsung ID is SVE-2020-17888 December 2020...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. Attackers can bypass Factory Reset Protection FRP via StatusBar. The Samsung ID is SVE-2020-17888 December 2020...
CVE-2020-35550
The CVE-2020-35550 entry describes a vulnerability affecting Samsung mobile devices running O(8.x), P(9.0), Q(10.0), and R(11.0) software, where attackers can bypass Factory Reset Protection (FRP) via the StatusBar. This entry is linked to Samsung’s internal ID SVE-2020-17888 (December 2020). No ...
CVE-2020-35550
An issue was discovered on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. Attackers can bypass Factory Reset Protection FRP via StatusBar. The Samsung ID is SVE-2020-17888 December 2020...
CVE-2020-35550: Undefined Security Weakness
An issue was discovered on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. Attackers can bypass Factory Reset Protection FRP via StatusBar. The Samsung ID is SVE-2020-17888 December 2020...
CVE-2020-28340
Samsung CVE-2020-28340 affects mobile devices running O(8.x) to R(11.0) and describes a vulnerability that allows bypassing Factory Reset Protection via Secure Folder (Samsung ID SVE-2020-18546). NVD reports CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 base score 7.5 (HIGH); attack vector NETWOR...
CVE-2020-28340: Undefined Security Weakness
An issue was discovered on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. Attackers can bypass Factory Reset Protection FRP via Secure Folder. The Samsung ID is SVE-2020-18546 November 2020...
CVE-2020-7316
CVE-2020-7316 maps to an Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0. A local attacker could run code with higher privileges by exploiting an unquoted service path and from a compromised folder; this may also cause files to avoid encrypti...
frp-method.jp Cross Site Scripting vulnerability OBB-1386697
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-7316: Unquoted Search Path or Element
Unquoted service path vulnerability in McAfee File and Removable Media Protection FRP prior to 5.3.0 allows local users to execute arbitrary code, with higher privileges, via execution and from a compromised folder. This issue may result in files not being encrypted when a policy is triggered...
CVE-2020-0266
In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1110864...
CVE-2020-0266: Missing Authorization
In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1110864...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via AppInfo. The Samsung ID is SVE-2020-17758 August 2020...
CVE-2020-25051
CVE-2020-25051 affects Samsung mobile devices running Android P (9.0) and Q (10.0). The vulnerability permits bypassing Factory Reset Protection (FRP) via AppInfo, as described across multiple sources (NVD entry, Red Hat advisory, NCSC summary) with Samsung’s ID SVE-2020-17758. The exact affected...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via the KNOX API. The Samsung ID is SVE-2020-17318 July 2020...
CVE-2020-15579
CVE-2020-15579 describes a FRP bypass on Samsung mobile devices running O(8.x), P(9.0) and Q(10.0) via the KNOX API (Samsung ID SVE-2020-17318). Documents consistently identify FRP bypass as the issue; no concrete exploit technique, affected model list, or fixed version is provided in the sources...
CVE-2020-15580
Samsung mobile devices running O(8.x), P(9.0), and Q(10.0) are affected by CVE-2020-15580, allowing attackers to bypass Factory Reset Protection by enrolling a new lock password. Root cause details are not provided in the documents. Impact is FRP bypass; no exploit vectors or in-the-wild details ...