PT-2026-85614

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description A flaw exists in the HID huawei module where the to usb interface function is called without first verifying if the device is actually a USB device using hid is usb. This is problematic...

CVE-2026-43499-NAM-AL00

CVE-2026-43499 — GhostLock auf Huawei Nova 9 NAM-AL00 Sicherheitsforschung: Bestätigung auf dem Gerät und Exploit-Analyse von CVE-2026-43499 GhostLock auf Huawei Nova 9 NAM-AL00, Snapdragon 778G/SM7325, HarmonyOS 4.2.0.185, Kernel 5.4.86-qgki. Zusammenfassung CVE-2026-43499 ist ein...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 — GhostLock on Huawei Nova 9 NAM-AL00 Securi...

Huawei E5331 Info Disclosure

Module exploits information disclosure vulnerability in Huawei E5331 MiFi Mobile Hotspotdevices. If the target is vulnerable it allows to read sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei E5331 Info Disclosure""" import re from kittysploit import from...

Huawei HG866 Password Change

Module exploits password change vulnerability in Huawei HG866 devices. If the target is vulnerable it allows to change administration password. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG866 Password Change""" import re from kittysploit import from lib.protocols.http.httpclient import...

Huawei HG520 Information Disclosure

Module exploits Huawei EchoLife HG520 information disclosure vulnerablity. If the target is vulnerable it is possible to retrieve sensitive information. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG520 Information Disclosure""" import re from kittysploit import from...

Huawei Router HG532 RCE

Module exploits remote command execution in Huawei Router HG532 devices. If the target is vulnerable, command loop is invoked that allows executing commands on operating system level. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei Router HG532 RCE""" from kittysploit import from...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 GhostLock — ARM32 Kernel Privilege Escalation...

Exploit for Double Free in Linux Linux_Kernel

Huawei P10 CVE-2017-8890 bootloader-unlock research This repo...

Huawei Auth Http Server - Arbitrary File Read Detection

Huawei Auth HTTP Server is vulnerable to Arbitrary File Read. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei Auth HTTP Server is vulnerable to Arbitrary File Read.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Huawei HG532e Default Credential Detection

Huawei HG532e default admin credentials were discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG532e default admin credentials were discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Huawei...

Huawei HG255s - Local File Inclusion Detection

Huawei HG255s is vulnerable to local file inclusion due to insufficient validation of the received HTTP requests. A remote attacker may access the local files on the device without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei HG255s is vulnerable to local file inclusion due...

HUAWEI Home Gateway HG658d Detection

HUAWEI Home Gateway panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HUAWEI Home Gateway panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HUAWEI Home Gateway HG658d Detection',...

Security Notice - Statement on Remote Code Execution Vulnerability in Fastjson2

Following the discovery of the remote code execution vulnerability in Fastjson2, Huawei has launched an immediate investigation. Attackers controlling JSON requests can exploit this vulnerability to execute arbitrary code on the target server. The investigation is completed. If you have deployed...

Security Notice - Statement on Remote Code Execution Vulnerability in Fastjson

Huawei has recently realized the Remote Code Execution RCE vulnerability in Fastjson. A remote attacker can exploit this vulnerability by sending crafted JSON data. Successful exploitation of this vulnerability may lead to remote code execution. If you have deployed Huawei Next-Generation Firewal...

airflow-provider-huawei-cloud-demo (>=0.0.9, <=0.0.23) potentially affected by CVE-2025-69219 via apache-airflow-providers-http (5.2.1)

apache-airflow-providers-http PYPI version 5.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-http and may be impacted: - airflow-provider-huawei-cloud-demo =0.0.9, =0.0.23 Source cves: CVE-2025-69219 Source advisory:...

Huawei HarmonyOS IPC module race condition vulnerability

Huawei HarmonyOS is a distributed operating system designed for various scenarios, supporting collaborative interactions between multiple devices and intelligent interactions. There is a race condition vulnerability in the IPC module of Huawei HarmonyOS. This vulnerability stems from the improper...

Huawei EMUI and Huawei HarmonyOS authorization issue vulnerabilities

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei. Huawei EMUI is a mobile operating system developed based on Android. Huawei HarmonyOS is an operating system that provides a full-scenario distributed operating system based on a microkernel. There are authorization...

Huawei HarmonyOS SMS app path traversal vulnerability

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. The Huawei HarmonyOS SMS app contains a path traversal vulnerability, which can be exploited by attackers to compromise the system’s...

Huawei HarmonyOS Print Module Permission Control Vulnerability

Huawei HarmonyOS is a distributed operating system designed for various scenarios, primarily providing features such as cross-device collaboration, intelligent connectivity, and secure operation environments. The print module of Huawei HarmonyOS has a permission control vulnerability, which stems...