CVE-2019-19515

Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings...

CVE-2019-19515

CVE-2019-19515 concerns Ayision Ays-WR01 devices with the v28K.RPT.20161224 release, where a stored cross-site scripting (XSS) vulnerability exists in wireless settings. Connected sources describe the underlying issue as operations on memory without proper data validation, leading to improper rea...

ASUS ZenFone 5 Selfie Access Control Error Vulnerability

The ASUS ZenFone 5 Selfie is a smartphone from Asus ASUS of Taiwan, China. An Access Control Error vulnerability exists in ASUS ZenFone 5 Selfie. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker can exploi...

GHIA CamIP 1.2 for iOS - Password Denial of Service (PoC)

GHIA CamIP 1.2 for iOS - Password Denial of Service PoC Exploit Title: GHIA CamIP 1.2 for iOS - 'Password' Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2019-11-27 Vendor Homepage: https://apps.apple.com/mx/app/ghia-camip/id1342090963 Software Link: App Store for iOS devices...

GHIA CamIP 1.2 for iOS - 'Password' Denial of Service (PoC)

Exploit Title: GHIA CamIP 1.2 for iOS - 'Password' Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2019-11-27 Vendor Homepage: https://apps.apple.com/mx/app/ghia-camip/id1342090963 Software Link: App Store for iOS devices Tested Version: 1.2 Vulnerability Type: Denial of Servic...

Doogee Mix has an unspecified vulnerability

Doogee Mix is a smartphone from the Chinese company Doogee. A security vulnerability exists in the com.mediatek.factorymode app in Doogee Mix build fingerprint: DOOGEE/MIX/MIX:7.0/NRD90M/1495809471:user/release-keys. An attacker could use this vulnerability to make unauthorized changes to wireles...

Unspecified Vulnerability in Blackview BV9000Pro-F

The Blackview BV9000Pro-F is a smartphone from Blackview of Hong Kong, China. A security vulnerability exists in the Blackview BV9000Pro-F build fingerprint: Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/1514363110:user/release-keys in the com.mediatek. A security vulnerability exists in the...

Unspecified Vulnerability in Doogee BL5000

Doogee BL5000 is a smartphone from Doogee, a Chinese company. A security vulnerability exists in the com.mediatek.factorymode app in the Doogee BL5000 build fingerprint: DOOGEE/BL5000/BL5000:7.0/NRD90M/1497072355:user/release-keys. An attacker could use this vulnerability to make unauthorized...

Unspecified Vulnerability in Kata M4s

Kata M4s is a smartphone. The com.mediatek.factorymode app in the Kata M4s build fingerprint: alps/fullhct675066n/hct675066n:7.0/NRD90M/1495624556:user/test-keys has a security vulnerability. An attacker could use this vulnerability to make unauthorized changes to wireless settings via other...

Unspecified Vulnerability in Blackview BV7000_Pro

The Blackview BV7000Pro is a smartphone from Blackview of Hong Kong, China. A security vulnerability exists in the Blackview BV7000Pro build fingerprint: Blackview/BV7000Pro/BV7000Pro:7.0/NRD90M/1493011204:user/release-keys in the com.mediatek. A security vulnerability exists in the factorymode...

Unspecified Vulnerability in Bluboo Bluboo_S1

Bluboo BlubooS1 is a smartphone. The com.mediatek.factorymode app in Bluboo BlubooS1 build fingerprint: BLUBOO/BlubooS1/BlubooS1:7.0/NRD90M/1495809471:user/release-keys A security vulnerability exists. An attacker could use this vulnerability to make unauthorized changes to wireless settings via...

Xiaomi Mi Mix has an unspecified vulnerability

The Xiaomi Mi Mix is a smartphone from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in Xiaomi Mi Mix build fingerprint: Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys in Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1 A security vulnerability exists in...

Xiaomi Mi Note 2 is vulnerable

Xiaomi Mi Note 2 is a smartphone from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in the com.miui.powerkeeper app in Xiaomi Mi Note 2 build fingerprint: Xiaomi/scorpio/scorpio:6.0.1/MXB48T/7.1.5:user/release-keys. An attacker can exploit this vulnerability to make...

Xiaomi Mi A2 Lite Access Control Error Vulnerability (CNVD-2019-41689)

Xiaomi Mi A2 Lite is a smartphone from Chinese company Xiaomi Technology Xiaomi. The Xiaomi Mi A2 Lite build fingerprint: xiaomi/daisy/daisysprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys in the com.huaqin. An access control error vulnerability exists in the factory app. An attacker...

Xiaomi Mi Mix 2S Access Control Error Vulnerability (CNVD-2019-41691)

Xiaomi Mi Mix 2S is a smartphone from Chinese company Xiaomi Technology Xiaomi. A vulnerability in the Xiaomi Mi Mix 2S build fingerprint: Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys in the com.huaqin. An access control error vulnerability exists in the factor...

CVE-2019-15467

The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app versionCode=1, versionName=A2060201801032053 that allows unauthorized wireles...

CVE-2019-15468

The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisysprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app versionCode=1, versionName=QL1715201812071953 that allows unauthorized wireles...

CVE-2019-15466

The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakuraindia/sakuraindia:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app versionCode=1, versionName=QL1715201812191721 that allows...

CVE-2019-15744

The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyakisoftbank/keyakisoftbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys contains a pre-installed app with a package name of jp.softbank.mb.tdrl app versionCode=1413005, versionName=1.3.0 that allows unauthoriz...

CVE-2019-15424

The Doogee BL5000 Android device with a build fingerprint of DOOGEE/BL5000/BL5000:7.0/NRD90M/1497072355:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a...