huawei-p10-cve-2017-8890-unlock

Huawei P10 CVE-2017-8890 부트로더 잠금 해제 연구 이 저장소는 소유자가 승인한 연구 프로젝트를 문서화한 것으로, CVE-2017-8890을 Huawei P10 펌웨어 하나에 포팅하고, 커널 use-after-free를 임의 커널 읽기/쓰기 및 임시 root로 변환하고, Huawei의 NVE 저널을 재구성했으며, 정상적인 NVE 드라이버를 통해 교체용 부트로더 자격 증명을 설치하고, fastboot가 선택한 평문 코드를 수락했는지 검증했습니다. 테스트 대상은 다음과 같습니다: Huawei P10 VTR-L29...

CLSA-2026-1790174106 TuxCare security update for craftcms/cms (1 CVE)

TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 3.9.15-p10+tuxcare...

Exploit for Double Free in Linux Linux_Kernel

Huawei P10 CVE-2017-8890 bootloader-unlock research This repo...

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization via the authorization process. An attacker can bypass security measures and gain unauthorized read access by leveraging high privileges without...

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization in the authorization process. An attacker can gain unauthorized write access by bypassing security measures. Remediation Upgrade...

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization via the authorization process. An attacker can gain unauthorized write access by bypassing security measures. Remediation Upgrade...

CVE-2018-25296 P10 Central Management Software 1.4.13 Denial of Service

P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 2000-byte payload into the password field and click login to trigger an...

CVE-2018-25296: Buffer Copy without Checking Size of Input

P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 2000-byte payload into the password field and click login to trigger an...

Ambient P10 Central Management Software 安全漏洞

Ambient P10 Central Management Software is a management software developed by the American company Ambient, designed for centralized management and monitoring of the operating status of devices and systems. Version 1.4.13 of Ambient P10 Central Management Software contains a security vulnerabilit...

EUVD-2020-12698

Malware in sbrugna...

EUVD-2017-11869

Malware in sbrugna...

EUVD-2017-11868

Malware in sbrugna...

EUVD-2017-17108

Malware in sbrugna...

EUVD-2019-6368

Malware in sbrugna...

EUVD-2017-17103

Malware in sbrugna...

EUVD-2017-17111

Malware in sbrugna...

GHSA-8HCX-XVWW-6C6H Magento Security feature bypass

Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access...

CVE-2025-27207

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized re...

Adobe Commerce 访问控制错误漏洞

Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe USA. An access control error vulnerability exists in Adobe Commerce that stems from an improper access control issue that could result in elevation of privilege. The following versions are affected:...

CVE-2019-15367

The Haier P10 Android device with a build fingerprint of Haier/P10/P10:8.1.0/O11019/1532662449:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system property...