CVE-2018-7923

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150C432 have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to...

CVE-2018-7922

CVE-2018-7922 affects Huawei ALP-L09 smartphones with versions older than 8.0.0.150(C432). The vulnerability is described as an insufficient input validation due to lack of parameter checking in the smartphone’s software. An attacker with root privileges could trick the user into installing a cra...

CVE-2018-7923

Huawei Mate 10 ALP-L09 devices running versions older than 8.0.0.150 (C432) are affected by CVE-2018-7923 due to insufficient input validation from a lack of parameter checks. An attacker with root privileges can trick a user into installing a crafted app, which may modify specific data and ultim...

CVE-2018-16946

LG LNB, LND, LNU, and LNV smart network camera devices have broken access control. Attackers are able to download /updownload/t.report aka Log & Report files and download backup files via download.php without authenticating. These backup files contain user credentials and configuration informatio...

Improper access control

LG LNB, LND, LNU, and LNV smart network camera devices have broken access control. Attackers are able to download /updownload/t.report aka Log & Report files and download backup files via download.php without authenticating. These backup files contain user credentials and configuration informatio...

CVE-2018-16946

CVE-2018-16946 affects LG LNB*, LND*, LNU*, LNV* smart IP cameras. The issue is broken access control that allows unauthenticated users to download /updownload/t.report and backup files (download.php), exposing credentials and configuration. Backup filenames can be discovered via logs/report data...

LG Smart IP Camera 1508190 - Backup File Download

Exploit Title: LG Smart IP Camera 1508190 - Backup File Download Date: 2018-09-11 Exploit Author: Ege Balci Vendor Homepage: https://www.lg.com Software version: 1310250 " exit0 print"==========================================================================" print" Exploit Title: LG Smart IP...

LG Smart IP Camera 1508190 File Disclosure

Exploit Title: LG Smart IP Camera 1508190 - Backup File Download Date: 2018-09-11 Exploit Author: Ege Balci Vendor Homepage: https://www.lg.com Software version: 1310250 " exit0 print"==========================================================================" print" Exploit Title: LG Smart IP...

LG Smart IP Camera 1508190 - Backup File Download

LG Smart IP Camera 1508190 - Backup File Download Exploit Title: LG Smart IP Camera 1508190 - Backup File Download Date: 2018-09-11 Exploit Author: Ege Balci Vendor Homepage: https://www.lg.com Software version: 1310250 " exit0...

Security Advisory - Two Insufficient Input Validation Vulnerabilities in Huawei Smart Phones

Some Huawei phones have two insufficient input validation vulnerabilities due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify different specific data to exploit these two vulnerabilities. Successful exploi...

CVE-2018-15552

The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with publicly readable variable "maxTickets" which is private, yet predictable and readable by the eth.getStorageAt function. Therefore, it allow...

CVE-2018-15552

The CVE describes a vulnerability in the PayWinner function of a simplelottery smart contract used by The Ethereum Lottery. The root cause is that the function uses the publicly readable storage variable maxTickets (private in code) to generate a random value, which is readable via eth.getStorage...

CVE-2018-15552

The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with publicly readable variable "maxTickets" which is private, yet predictable and readable by the eth.getStorageAt function. Therefore, it allow...

CVE-2018-0649

Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antivirus, DESlock+ Pro, and CompuSec all programs except packaged ones allows an attacker to gain...

CVE-2018-0649

The CVE-2018-0649 issue concerns an untrusted DLL search path in the installers for Canon IT Solutions Inc. software, affecting multiple products (e.g., ESET Smart Security Premium , ESET Internet Security , ESET Smart Security , ESET NOD32 Antivirus , DESlock+ Pro , and CompuSec ). The underlyin...

CVE-2018-0649

Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antivirus, DESlock+ Pro, and CompuSec all programs except packaged ones allows an attacker to gain...

Security Advisory - DoS Vulnerability in Some Huawei Smart Phones

There is a denial of service DoS vulnerability in some Huawei smart phones. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful exploitation can cause the smartphone black screen until...

CVE-2018-7990

CVE-2018-7990 affects Huawei Mate 10 Pro smartphones running versions before 8.1.0.326(C00). The vulnerability enables an FRP bypass during the phone reset process, where an attacker could bypass the Find My Phone protection after a sequence of voice and keyboard actions. This is tied to Huawei’s...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-28622)

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'cacgetserialnrfromCUID' function in the libopensc/card-cac.c file in versions prior to OpenSC 0.19.0-rc1. An attacker could use this vulnerability to cause a denial of service application crash...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-07205)

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'tcosselectfile' function in the libopensc/card-tcos.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker can exploit this vulnerability to cause a denial of service application crash...