CVE-2018-17471

Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

CVE-2018-17471: Undefined Security Weakness

Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

CVE-2018-7925

The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171C00 have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability...

Security feature bypass

The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171C00 have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability...

CVE-2018-7925

The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171C00 have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability...

CVE-2018-7925

CVE-2018-7925 relates to a lock-screen bypass vulnerability in the radio module of Huawei smartphones (Emily-AL00A). Affected versions are before 8.1.0.171(C00). The issue allows an unauthenticated attacker to bypass the lock screen by initiating a third-party input method app through specific ac...

CVE-2018-7925

The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171C00 have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability...

November 13, 2018—KB4467708 (OS Build 17763.134)

None None...

CVE-2018-7925: Incorrect Authorization

The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171C00 have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability...

PT-2018-18326

Name of the Vulnerable Software and Affected Versions: Huawei Emily-AL00A versions prior to 8.1.0.171C00 Description: The issue affects the radio module, allowing an unauthenticated attacker to bypass the lock screen by starting a third-party input method app through specific operations...

CVE-2018-19193

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

CVE-2018-19193

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

CVE-2018-19193: Improper Neutralization of Input During Web Page Generation

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

PT-2018-14853

Name of the Vulnerable Software and Affected Versions XiaoCms version 20141229 Description An issue was discovered that allows for XSS via the largest input box on the "New news" screen. Recommendations For XiaoCms version 20141229, consider restricting access to the "New news" screen until a fix...

Advanced tools: Process Hacker

Process Hacker is a very valuable tool for advanced users. It can help them to troubleshoot problems or learn more about specific processes that are running on a certain system. It can help identify malicious processes and tell us more about what they are trying to do. Background information...

SQL Injection Vulnerability in Touch Screen Version of VR Visualization and Intelligent Interactive Teaching Cloud Platform of One100

ChuangOne 100VR visualization intelligent interactive teaching cloud platform is based on the Phoenix ChuangOne virtual reality three-dimensional interactive engine running network VR simulation experiments in three-dimensional interactive environment, can realize a large number of parallel users...

Huawei Emily-AL00A cell phone lock screen bypass vulnerability

Emily-AL00A is a smartphone launched by Huawei. A lock screen bypass vulnerability exists in the radio module of the Huawei Emily-AL00A phone. An unauthenticated attacker can exploit this vulnerability to bypass the lock screen and launch a third-party input method installed on the phone via...

CVE-2018-9458

In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional executio...

X (Formerly Twitter): Incorrect details on OAuth permissions screen allows DMs to be read without permission

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! Summary: The OAuth screen can be tricke...

Green Electronics RainMachine Mini-8 and Touch HD 12 Web Application Cross-Site Request Forgery Vulnerability

Green Electronics RainMachine Mini-8 and Touch HD 12 Web Application are both products of Green Electronics USA.Green Electronics RainMachine Mini-8 is a smart irrigation sprinkler. Green Electronics RainMachine Mini-8 is a smart irrigation sprinkler and Touch HD 12 Web Application is a web-based...