MMS Client

This module sends an MMS message to multiple phones of the same carrier. You can use it to send a malicious attachment to phones. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MMS Client',...

Security Advisory - Arbitrary Memory Read Write Vulnerability in Huawei Smart Phones

There is a arbitrary memory read/write vulnerability in the hardware security module of some Huawei smart phones due to the input parameters validation. An attacker with the root privilege of the Android system could exploit this vulnerability to read and write memory data anywhere or execute...

Security Advisory - Buffer Overflow Vulnerability in the Boot Loaders of Huawei Mobile Phones

The boot loaders of some Huawei mobile phones have a buffer overflow vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the...

Security Advisory - Privilege Escalation Vulnerability in Huawei Smart Phones

There is a privilege escalation vulnerability in Huawei smart phones. An unauthenticated attacker can bypass phone activation to user management page of the phone and create a new user. Successful exploit could allow the attacker operate part function of the phone. Vulnerability ID:...

Security Advisory - Buffer Overflow Vulnerability in Emergdata Driver of Huawei Smart Phones

The emergdata driver of some Huawei smart phones has a buffer overflow vulnerability due to the lack of a parameters check. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart pho...

Security Advisory - Buffer Overflow Vulnerability in Goldeneye Driver of Huawei Smart Phones

The goldeneye driver of some Huawei smart phones has buffer overflow vulnerability due to the lack of a parameters check. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone...

Polycom VVX Web Interface Forced Admin Password Change Vulnerability

Polycom is a global leader in standards-based unified communications UC solutions for telepresence, video and voice. The Polycom VVX web interface can be forced to change the admin password vulnerability, which requires a user to access the "user" account in the web interface of a Polycom VoIP...

Security Advisory - Authentication Bypass Vulnerability in the 'Find Phone' Function of some Huawei Smart Phones

The 'Find Phone' function of some Huawei smart phones has an authentication bypass vulnerability. An unauthenticated attacker may wipe and factory reset the phone by special steps. Due to missing authentication of the 'Find Phone' function, an attacker may exploit the vulnerability to bypass the...

Security Advisory - Authentication Bypass Vulnerability in the 'Find Phone' Function of some Huawei Smart Phones

The 'Find Phone' function of some Huawei smart phones has an authentication bypass vulnerability. An unauthenticated attacker may wipe and factory reset the phone by special steps. Due to missing authentication of the 'Find Phone' function, an attacker may exploit the vulnerability to bypass the...

Huawei Mobile Phone Retrieval Feature Security Bypass Vulnerability

The huawei Mate 9, P9 are smartphones from the Chinese company Huawei Huawei. The Huawei phones are vulnerable to a security bypass vulnerability in the retrieval feature, which allows an attacker to bypass the phone retrieval and access the phone's system settings page by following specific step...

Security Advisory - Input Validation Vulnerability in Touchscreen Driver of Huawei Smart Phones

There is an input validation vulnerability in the touchscreen Driver of some Huawei smart phones. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system. Vulnerability ID: HWPSIRT-2016-12025 This...

Security Advisory - Phone Finder Bypass Vulnerability in Huawei Smart Phones

Phone Finder is a Huawei security method that was designed to make sure someone can't just wipe and factory reset the phone if user lost it or it was stolen. The Phone Finder in some Huawei smart phones can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System...

Phone-Hacking Firm Cellebrite Got Hacked; 900GB Of Data Stolen

The company that sells digital forensics and mobile hacking tools to others has itself been hacked. Israeli firm Cellebrite, the popular company that provides digital forensics tools and software to help law enforcement access mobile phones in investigations, has had 900 GB of its data stolen by ...

Security Advisory - FRP Bypass Vulnerability in Huawei Smart Phones

Factory Reset Protection FRP is a security method that was designed to make sure someone can't just wipe and factory reset the phone if user lost it or it was stolen. The FRP in some Huawei smart phones can be bypass. An attacker can bypass the FRP by special steps and wipe and factory reset the...

Security Advisory - Multiple Vulnerabilities in MTK Platform

There are multiple vulnerabilities in MTK platform used in Huawei smart phones. There is a integer overflow vulnerability in MTK platform used in Huawei smart phones. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to escalate...

Security Advisory - Input Validation Vulnerability in Wi-Fi Driver of Huawei Smart Phones

There is an input validation vulnerability in the Wi-Fi Driver of some Huawei smart phones. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege. Vulnerability ID:...

Security Advisory - FRP Bypass Vulnerability in Huawei Smart Phones

There is Factory Reset Protection FRP bypass security vulnerability in some Huawei smart phones. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can enter some functional modules without authorization and perform operations to update the Google...

Privilege elevation vulnerability in TrustZone driver for some Huawei phones

Huawei P9, P9 Lite, P8 Lite are Huawei smartphones. An elevation of privilege vulnerability exists in the TrustZone driver of some Huawei phones. An attacker may trick users into installing a malicious application, and the application can exploit the vulnerability to send specific parameters to t...

System privilege elevation vulnerability in Guangsheng FOTA service for multiple mtk platform phones (Phantom Vulnerability)

Shanghai Guangsheng Information Technology Co., Ltd. is the world's leading provider of terminal management cloud platform, FOTA Wireless Upgrade provides professional wireless upgrade solutions for IoT devices smart car, wearable, home, VR, etc.. System privilege elevation vulnerability exists i...

Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11304)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...