CVE-2020-1878

Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152DC735E152R3P3,versions earlier than 10.0.1.160C00E160R4P1 have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to...

CVE-2020-1878

Summary: CVE-2020-1878 affects Huawei smartphone OxfordS-AN00A. The issue is an improper authentication vulnerability where authentication to the target component is performed incorrectly when the device carries out an operation, enabling information leakage via a loaded malicious app. The affect...

CVE-2020-1878: Improper Authentication

Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152DC735E152R3P3,versions earlier than 10.0.1.160C00E160R4P1 have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to...

CVE-2020-9064

CVE-2020-9064 affects Huawei Honor V30 (OxfordS-AN00A) prior to version 10.0.1.167 (C00E166R4P1). The vulnerability is an improper authentication flaw in the device when performing operations that allows an attacker to obtain information by loading a malicious application, resulting in an informa...

Security Advisory - Improper Authentication Vulnerability in Huawei Smartphone

There is an improper authentication vulnerability in some Huawei smartphone. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak. Vulnerabili...

U.S. FDA: No link between smartphone radiation & cancer

By Waqas FDA has also rubbished previous studies linking smartphone radiation and causing cancer. This is a post from HackRead.com Read the original post: U.S. FDA: No link between smartphone radiation & cancer...

How to Get the Most Out of Your Smartphone's Encryption

Both iPhones and Androids are encrypted by default. But there are steps you can take to safeguard your data on backups and messaging apps...

Smartphone Election in Washington State

This year: King County voters will be able to use their name and birthdate to log in to a Web portal through the Internet browser on their phones, says Bryan Finney, the CEO of Democracy Live, the Seattle-based voting company providing the technology. Once voters have completed their ballots, the...

Defend Yourself Now and in the Future Against Mobile Malware

The world has gone mobile and the US is leading the way. It’s estimated that that the number of smartphone users alone topped 257 million in the States in 2018. That means three-quarters 74% of households now boast at least one mobile device. And in this new digital world, it’s mobile application...

CVE-2012-5878

Bulb Security Smartphone Pentest Framework SPF 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to 1 SEAttack.pl or 2 CSAttack.pl in frameworkgui/ or the 3 appURLPath parameter to frameworkgui/attachMobileModem.pl...

CVE-2012-5693

Bulb Security Smartphone Pentest Framework SPF before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to 1 remoteAttack.pl or 2 guessPassword.pl in frameworkgui/; the filename parameter to 3 CSAttack.pl or 4 SEAttack.pl in...

CVE-2012-5878

CVE-2012-5878 concerns the Smartphone Pentest Framework (SPF) versions 0.1.2–0.1.4. The connected records confirm a remote OS command injection vulnerability in SPF’s web GUI, triggered by unsanitized input in the hostingPath parameter for SEAttack.pl and CSAttack.pl (frameworkgui/), and the appU...

CVE-2012-5878

Bulb Security Smartphone Pentest Framework SPF 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to 1 SEAttack.pl or 2 CSAttack.pl in frameworkgui/ or the 3 appURLPath parameter to frameworkgui/attachMobileModem.pl...

CVE-2012-5693

Bulb Security Smartphone Pentest Framework SPF before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to 1 remoteAttack.pl or 2 guessPassword.pl in frameworkgui/; the filename parameter to 3 CSAttack.pl or 4 SEAttack.pl in...

CVE-2020-1785

Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of...

CVE-2020-1785

The CVE-2020-1785 issue affects Huawei/Mate 10 Pro, Honor V10/10 and Nova 4 smartphones. The root cause is a denial-of-service vulnerability where the system fails to properly check the status of a specific module during certain operations, enabling an attacker to trick a user into installing a m...

CVE-2020-1785: Undefined Security Weakness

Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of...

CVE-2012-5878: Improper Neutralization of Special Elements used in an OS Command

Bulb Security Smartphone Pentest Framework SPF 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to 1 SEAttack.pl or 2 CSAttack.pl in frameworkgui/ or the 3 appURLPath parameter to frameworkgui/attachMobileModem.pl...

CVE-2012-5693: Improper Neutralization of Special Elements used in an OS Command

Bulb Security Smartphone Pentest Framework SPF before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to 1 remoteAttack.pl or 2 guessPassword.pl in frameworkgui/; the filename parameter to 3 CSAttack.pl or 4 SEAttack.pl in...

PT-2020-7264

Name of the Vulnerable Software and Affected Versions: Bulb Security Smartphone Pentest Framework SPF versions prior to 0.1.3 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in various parameters to different scripts in the frameworkgui...