PT-2018-12863

Name of the Vulnerable Software and Affected Versions MXQ TV Box version 4.4.2 Description The Android framework in the MXQ TV Box contains a dynamically registered broadcast receiver app component named com.android.server.MasterClearReceiver. This component is not protected with the...

PT-2018-12861

Name of the Vulnerable Software and Affected Versions Leagoo Z5C Android device with a build fingerprint of sp7731c 1h10 32v4 bird:6.0/MRA58K/android.20170629.214736:user/release-keys Description The device contains a pre-installed platform app with a package name of com.android.settings that has...

CVE-2018-14985: Missing Authorization

The Leagoo Z5C Android device with a build fingerprint of sp7731c1h1032v4bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package name of com.android.settings versionCode=23, versionName=6.0-android.20170630.092853 that contains an exported...

CVE-2018-14987: Incorrect Permission Assignment for Critical Resource

The MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201N/m201N:4.4.2/KOT49H/20160106:user/test-keys contains the Android framework with a package name of android versionCode=19, versionName=4.4.2-20170213 that dynamically registers a broadcast receiver app component named...

Bento4 memory leak vulnerability (CNVD-2019-07058)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A memory leak vulnerability exists in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp in Bento4 1.5.1-627, which can be exploited by an attacker to cause a denial of service...

UBUNTU-CVE-2018-20407

An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42hls...

This Week in Security News: Security Predictions and Malware Attacks

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about the span of categories for Trend Micro’s 2019 Security Predictions. Also, learn about a new exploit kit that targets home or sma...

PHOENIX CONTACT Factory Manager Detection (Windows SMB Login)

SMB login-based detection of PHOENIX CONTACT Factory Manager. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...

CVE-2018-7988

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...

CVE-2018-7988

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...

CVE-2018-7988

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...

PT-2018-18358

Name of the Vulnerable Software and Affected Versions: Smartphones affected versions not specified Description: The issue concerns a Factory Reset Protection FRP bypass. It arises due to insufficient permission verification by the system. An attacker can exploit this by connecting the smartphone ...

CVE-2018-7988: Incorrect Authorization

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...

Huawei smartphone FRP bypass vulnerability

Huawei Mate9 Pro, Nova 2 Plus are a smartphone from the Chinese company Huawei Huawei. An FRP bypass vulnerability exists on the Huawei Mate9 Pro, Nova 2 Plus smartphones. As the system fails to adequately check permissions, an attacker connects the phone to another phone via a data cable and the...

CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

Information disclosure

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

UBUNTU-CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...