Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11305)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...

Multiple Vulnerabilities in Samsung Mobile Phones

Samsung Mobile Phone is a smartphone released by the South Korean company Samsung. An information disclosure vulnerability and a denial of service vulnerability exist in Samsung Mobile Phone. An attacker could use these vulnerabilities to cause a denial of service or gain access to unauthorized...

Security Advisory - Input Validation Vulnerability in Wi-Fi Driver of Huawei Smart Phones

There is an input validation vulnerability in the Wi-Fi Driver of some Huawei smart phones. An attacker may trick a user into installing a malicious application, and the application can exploit this vulnerability to gain privileges for certain system calls. Vulnerability ID: HWPSIRT-2016-11026 Th...

Belkin's WeMo Gear Can Hack Android Phones

A SQL injection vulnerability is present in Belkin’s WeMo home automation firmware that could allow a third party with local access to a network to gain root access to devices such as light switches, lightbulbs, security cameras and coffee makers. Researchers at Invincea Labs, who discovered the...

Huawei cell phones suffer from a security vulnerability caused by the failure of the PXN protection mechanism.

Huawei Honor is a smartphone product of the Chinese company Huawei. Huawei phones have a PXN protection mechanism failure security vulnerability. Due to a PXN Privileged Execute-Never protection mechanism failure security vulnerability in the driver code of several Huawei cell phones, an attacker...

Security Advisory - DOS Vulnerability in ION Memory Management Module of Huawei Smart Phone

A denial of service DoS vulnerability exists in the ION memory management module of some Huawei mobile phones. An attacker may trick a user into installing a malicious app to send specific parameters to a Huawei mobile phone. Successful exploit could cause the system to restart.Vulnerability ID:...

Hacking Firmware from Mobile Phone Hacking Company Leaked Online

The Israeli firm Cellebrite, which provides digital forensics tools and software to help law enforcement access mobile phones in investigations, has had its firmware and software leaked online. Yes, you heard that right. Cellebrite's most sensitive in-house capabilities have been made public by o...

Backdoor Vulnerability in Foxconn's Android Phone Firmware

Foxconn is an electronic parts manufacturer that assembles Android smartphones. The main products are tablets, laptops and smartphones. A backdoor vulnerability exists in the firmware of Foxconn's Android phones. Due to a vulnerability in the bootloader code responsible for launching the Android...

Huawei mobile touthscreen driver suffers from heap overflow security vulnerability

touthscreen driver time for Huawei phones a software to improve the accuracy of screen clicks. A heap overflow security vulnerability exists in touthscreen driver for Huawei phones. An attacker could trick users into installing a malicious application, and the application could exploit the...

Security Advisory - Privilege Escalation Vulnerability in Huawei Multiple Smart Phones

There is a privilege escalation vulnerability in Android kernel due to the lack of a parameters check. An attacker may trick a user into installing a malicious application, and the application can modify the data of kernel to crash the system or escalate user privilege. Vulnerability ID:...

Cisco Small Business SPA300 Series/SPA500 Series and SPA51x IP Phones Denial of Service Vulnerability

Cisco Small Business SPA300 and so on are the S series of IP phone products of the American Cisco Cisco company. A denial of service vulnerability exists in Cisco Small Business SPA300 Series/SPA500 Series and SPA51x IP Phones. An attacker could exploit this vulnerability to cause a denial of...

Cisco Small Business SPA3x/5x Series Denial of Service Vulnerability

A vulnerability in the HTTP framework of Cisco Small Business SPA300 Series IP Phones, Cisco Small Business SPA500 Series IP Phones, and Cisco SPA51x IP Phones could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is du...

Samsung Mobile Phones Denial of Service Vulnerability

Samsung Mobile Phones are smartphone products released by the South Korean company Samsung. A security vulnerability in Samsung Mobile Phones running on the Android platform allows remote attackers to conduct denial-of-service attacks that can be exploited to crash the system...

Samsung Mobile Phones Denial of Service Vulnerability

Samsung Mobile Phones are smartphone products released by the South Korean company Samsung. A denial of service vulnerability exists in Samsung Mobile Phones, which can be exploited by remote attackers to cause a denial of service...

Security Advisory - Input Validation Vulnerabilities in Camera Driver of Huawei Smart Phones

There are five input validation vulnerabilities in the Camera driver of some Huawei smart phones. An attacker may trick a user into installing a malicious application, and the application can send given parameter to Camera driver to crash the system or escalate user privilege. Vulnerability ID:...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1434

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

CVE-2016-1434

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

Code injection

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...