CVE-2023-38294

The Itel Vision 3 Turbo Android device is vulnerable because a pre-installed application, com.transsion.autotest.factory (versionCode='7', versionName='1.8.0(220310_1027)'), possesses inadequate access control . This flaw allows local third-party apps to execute arbitrary shell commands within th...

PT-2024-12699 · Itel +1 · Itel Vision 3 Turbo +1

Name of the Vulnerable Software and Affected Versions: Itel Vision 3 Turbo Android device with pre-installed app com.transsion.autotest.factory version 1.8.0220310 1027 Description: The vulnerability in the com.transsion.autotest.factory app allows local third-party apps to execute arbitrary shel...

Itel Vision 3 Turbo 安全漏洞

The Itel Vision 3 Turbo is a smartphone from Itel. A security vulnerability exists in the Itel Vision 3 Turbo that stems from the fact that certain software versions of the device contain a vulnerable pre-installed application com.transsion.autotest.factory with insufficient access control that...

CVE-2023-38294: Incorrect Default Permissions

Certain software builds for the Itel Vision 3 Turbo Android device contain a vulnerable pre-installed app with a package name of com.transsion.autotest.factory versionCode='7', versionName='1.8.02203101027' that allows local third-party apps to execute arbitrary shell commands in its context syst...

CVE-2024-1480

Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without authentication...

CVE-2024-1480 Unitronics Vision Standard Unauthenticated Password Retrieval

Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without authentication...

CVE-2024-1480: Storing Passwords in a Recoverable Format

Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without authentication...

Unitronics Vision series PLCs 安全漏洞

Unitronics Vision series PLCs are a series of PLCs from Unitronics, Inc. A security vulnerability exists in Unitronics Vision series PLCs that originates from a vulnerability that allows an attacker to retrieve message mode passwords without authentication. Affected products and versions:...

Unitronics Vision Legacy series (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Unitronics Equipment : Vision Legacy series Vulnerability : Storing Passwords in a Recoverable Format 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker...

PT-2024-3340

Name of the Vulnerable Software and Affected Versions Unitronics Vision versions affected versions not specified Description The issue is related to the storage of passwords in a recoverable format in the Unitronics Vision programmable logic controllers. This allows an attacker to retrieve the...

Apple Security Update: visionOS 1.1.2

Apple recommends to install security update visionOS 1.1.2 on devices Apple Vision Pro...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a privilege issue vulnerability that stems from a vulnerability in the Parallel Vision module that enables application privileg...

The vulnerability of the WebKit component in iOS operating systems, macOS Sonoma, iPadOS, tvOS, visionOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the WebKit component in iOS operating systems, macOS Sonoma, iPadOS, tvOS, visionOS, and watchOS relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Exploit for Embedded Malicious Code in Tukaani Xz

How to detect the CVE-2024-3094 I'll walk through the step-by...

Keyence VT STUDIO 安全漏洞

Keyence VT STUDIO is a software used by Keyence China to configure and monitor its vision inspection systems. A security vulnerability exists in Keyence VT STUDIO version 8.32 and prior versions, which stems from a DLL loading error. The vulnerability can be exploited by an attacker to execute...

CVE-2024-23727

The YI Smart Kami Vision com.kamivision.yismart application through 1.0.020231219 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component...

Kami Vision YI Smart 安全漏洞

Kami Vision YI Smart is a smart camera program from Kami Vision. A security vulnerability exists in Kami Vision YI Smart com.kamivision.yismart version 1.0.020231219, which originated from a vulnerability that allows remote attackers to execute arbitrary WebViewActivity component...

CVE-2024-23727

The YI Smart Kami Vision com.kamivision.yismart application through 1.0.020231219 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component...

CVE-2024-23727

The YI Smart Kami Vision (com.kamivision.yismart ) application for Android, versions through 1.0.0_20231219 , is vulnerable to the execution of arbitrary JavaScript code . This is caused by an implicit intent targeting the com.ants360.yicamera.activity.WebViewActivity component. A remote attacker...

CVE-2024-23727

The YI Smart Kami Vision com.kamivision.yismart application through 1.0.020231219 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component...