Improper access control

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage...

CVE-2019-5265

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage...

CVE-2019-5265

CVE-2019-5265 concerns Huawei Share on Huawei P30 (9.1.0.193) with improper access control. The vulnerability allows an attacker to simulate a sender and access P2P network information, causing potential information leakage. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE...

CVE-2019-5266

CVE-2019-5266 affects Huawei P30’s Huawei Share feature (version 9.1.0.193 C00E190R2P1). The issue is insufficient input validation that can be triggered by crafted packets, potentially causing the Huawei Share function to be disabled on the device. Public documents from Huawei’s PSIRT note this ...

CVE-2019-5266: Improper Input Validation

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled...

CVE-2019-5211

The CVE-2019-5211 issue affects Huawei P20 devices with Huawei Share prior to Emily-L29C 9.1.0.311, caused by improper file management during file transfers. The vulnerability could allow an attacker to cause deletion of files on the victim’s device after tricking the user into certain operations...

Security Advisory - Improper File Management Vulnerability in Huawei Share

The Huawei Share function of some Huawei phones has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully exploit may cause some files on the victim...

CVE-2018-4388

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.1...

CVE-2018-4379

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1...

Code injection

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.1...

CVE-2018-4379

Summary: CVE-2018-4379 is a lock-screen vulnerability in Apple iOS prior to version 12.0.1 that allows access to the share function from the lock screen. The issue is addressed by restricting options offered on a locked device and is documented as part of iOS 12.0.1. Affected software: Apple iOS ...

CVE-2018-4388

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.1...

CVE-2018-4379: Exposure of Sensitive Information to an Unauthorized Actor

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1...

Thycotic Secret Server Open Redirect Vulnerability

Thycotic Secret Server is a set of password protection software from the American company Thycotic. An open redirection vulnerability exists in the share function in versions of Thycotic Secret Server prior to 10.2.000019. A remote attacker could exploit this vulnerability to redirect users to...

CVE-2017-11725

The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections...

CVE-2017-11725

The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections...

CVE-2017-11725

CVE-2017-11725 affects IBM Security Secret Server (Thycotic Secret Server) prior to 10.2.000019. The vulnerability resides in the share function where the Back Button is mishandled, causing unintended redirections (open redirect-like behavior) and potential user confusion or credential exposure r...

CVE-2017-11725: URL Redirection to Untrusted Site

The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections...

Bashi v1.6 iOS - Persistent Mail Encoding Vulnerability

Document Title: =============== Bashi v1.6 iOS - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1852 Release Date: ============= 2016-05-24 Vulnerability Laboratory ID VL-ID: ==================================== 18...

C/C++ Offline Compiler and C For OS - Persistent Cross-Site Scripting

Exploit for iOS platform in category web applications Document Title: =============== C & C++ for OS - Filter Bypass & Persistent Vulnerability Product & Service Introduction: =============================== This is an ios c app,you can learn,run,share c code. The software is a offline compiler f...