PT-2020-7270

Name of the Vulnerable Software and Affected Versions: Bulb Security Smartphone Pentest Framework SPF versions 0.1.2 through 0.1.4 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to 1 SEAttack.pl or 2 CSAttack.pl i...

Most second-hand phones contain previous owner’s data

By Sudais Here's why you should avoid buying or selling second-hand phones or what to do before selling your smartphone to someone. This is a post from HackRead.com Read the original post: Most second-hand phones contain previous owner's data...

CVE-2019-5266

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled...

CVE-2019-5265

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage...

CVE-2019-5266

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled...

Improper access control

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage...

Huawei P30 Input Validation Error Vulnerability

Huawei P30 is a smartphone from Chinese company Huawei Huawei. An input validation error vulnerability exists in the Share feature in Huawei P30 version 9.1.0.193 C00E190R2P1. An attacker can exploit this vulnerability to cause the feature to be disabled by sending a specially crafted message to ...

Unspecified Vulnerability in Yulong Computer Communication Technology Coolpad 1851

Yulong Computer Communication Technology Coolpad 1851 is a smartphone from China's Yulong Computer Communication Technology. An unspecified vulnerability exists in the Yulong Computer Communication Technology Coolpad 1851. An attacker can exploit this vulnerability to modify system properties...

ASUS ASUS_X00LD_3 Access Control Error Vulnerability

The ASUS ASUSX00LD3 is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ASUSX00LD3. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could exploit th...

Samsung J5 Access Control Error Vulnerability

The Samsung J5 is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in the Samsung J5. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could...

ASUS ASUS_A002_2 Access Control Error Vulnerability

The ASUS ASUSA0022 is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ASUSA0022. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could exploit the...

Transn Tecno Camon iAir 2Plus Code Execution Vulnerability

The Transn Tecno Camon iAir 2 Plus is a smartphone from the Chinese company Transn. A security vulnerability exists in the Transsound Tecno Camon iAir 2 Plus build fingerprint: TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys in the com.lovelyfont. A security vulnerability exists ...

Unspecified Vulnerability in Lava Flair Z1

Lava Flair Z1 is a smartphone from Lava India. Lava Flair Z1 has an unspecified vulnerability. An attacker can exploit the vulnerability to unauthorized switching of Wi-Fi...

How to identify malware on your phone with these 7 signs

By Uzair Amir Malware and spyware are two security issues most commonly associated with desktop computers. Here's how to identify on your smartphone... This is a post from HackRead.com Read the original post: How to identify malware on your phone with these 7 signs...

CVE-2019-5263

HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305MAC and earlier versions and HwBackup with earlier versions before 9.1.1.308 have a brute forcing encrypted backup data vulnerability. Huawei smartphone user backup information can be obtained by brute forcing the password for encrypting th...

CVE-2019-5225

P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, versions earlier than Hima-AL00B 9.1.0.135C00E200R2P1, versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12 have a buffer overflow vulnerability on several , the system does not properly...

CVE-2019-5227

CVE-2019-5227 affects Huawei P30, P30 Pro, Mate 20 and HiSuite. The issue is a downgrade vulnerability caused by insufficient validation of upgrade packages, allowing the device to be downgraded to older firmware. Affected conditions include ELLE-AL00B 9.1.0.193, VOGUE-AL00A 9.1.0.193, Hima-AL00B...

CVE-2019-5263

HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305MAC and earlier versions and HwBackup with earlier versions before 9.1.1.308 have a brute forcing encrypted backup data vulnerability. Huawei smartphone user backup information can be obtained by brute forcing the password for encrypting th...

CVE-2019-5263

CVE-2019-5263 affects Huawei HiSuite (9.1.0.305 and earlier; 9.1.0.305 MAC) and HwBackup (before 9.1.1.308). The issue is a brute-forcing vulnerability against the encrypted backup password, enabling extraction of backed-up Huawei device data. Huawei’s security advisory HWPSIRT-2019-08102 notes a...

CVE-2019-5226

P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1, versions earlier than VOGUE-AL00A 9.1.0.193C00E190R2P1, versions earlier than Hima-AL00B 9.1.0.135C00E133R2P1 and HiSuite with versions earlier than HiSuite 9.1.0.305 have a version downgrade...