CVE-2022-48305

The CVE-2022-48305 entry concerns Huawei Children Smart Watch (Simba-AL00) running version 1.1.1.274 exhibiting an identity authentication bypass that can cause the access control function of specific applications to fail. Multiple sources (NVD, Red Hat advisory, CNVD/CNNVD mirrors, Huawei PSIRT)...

PT-2023-15683

Name of the Vulnerable Software and Affected Versions Huawei Children Smart Watch Simba-AL00 version 1.1.1.274 Description The issue is related to an identity authentication bypass. Successful exploitation may cause the access control function of specific applications to fail. Recommendations For...

CVE-2022-48305

There is an identity authentication bypass vulnerability in Huawei Children Smart Watch Simba-AL00 1.1.1.274. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail...

Security Advisory - Identity Authentication Bypass Vulnerability in The Huawei Children Smart Watch (Simba-AL00)

The Huawei Children Smart Watch Simba-AL00 has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail.Vulnerability ID:HWPSIRT-2022-18770 This vulnerability has been assigned a CVE ID:...

CVE-2022-37730

In ftcms 2.1, there is a Cross Site Request Forgery CSRF vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server corresponding to the identity authentication...

Cross site request forgery (csrf)

In ftcms 2.1, there is a Cross Site Request Forgery CSRF vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server corresponding to the identity authentication...

Cyber Signals: Defending against cyber threats with the latest research, insights, and trends

We’re excited to introduce Cyber Signals, a cyber threat intelligence brief informed by the latest Microsoft threat data and research. This content, which will be released quarterly, offers an expert perspective into the current threat landscape, discussing trending tactics, techniques, and...

Huawei HarmonyOS Access Control Error Vulnerability (CNVD-2022-08327)

Huawei HarmonyOS is an operating system from Huawei, China. An access control error vulnerability exists in Huawei HarmonyOS, which stems from a component of the product that does not effectively authenticate the user's identity. No details of the vulnerability are currently available...

Dahua Multiple Vulnerabilities (DHCC-SA-202106-001) - Active Check

Multiple Dahua devices and their OEMs are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] Fedora 35 Update: freeipa-4.9.7-4.fc35

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

CVE-2021-33044

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...

CVE-2021-33045

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...

CVE-2021-33045

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...

Authentication flaw

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...

CVE-2021-33045

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...

CVE-2021-33045

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...

CVE-2021-33045

CVE-2021-33045 is an authentication bypass vulnerability in Dahua IP cameras/IPc devices during login. The initial description confirms an identity authentication bypass by constructing malicious data packets. Connected PoC data detail concrete technical aspects: the campaign uses reverse-enginee...

CVE-2021-33044

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...

CVE-2021-33044

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...

CVE-2021-33044

CVE-2021-33044 is an authentication bypass vulnerability in Dahua IPC/IPCam/VTH/VTO devices that can be triggered during login by crafting malicious data packets, allowing bypass of device identity authentication. Connected sources provide concrete technical context, including PoCs and exploit co...