Xiaomi Mi A3 Access Control Error Vulnerability

The Xiaomi Mi A3 is a smartphone from Chinese company Xiaomi Technology Xiaomi. The Xiaomi Mi A3 build fingerprint: xiaomi/onceea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains an access control error in the com.qualcomm.qti. An access control error vulnerability exists in the...

CVE-2019-15475

The Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onceea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=28, versionName=9 that allows unauthorized microphone audio...

CVE-2019-15433

The Samsung A3 Android device with a build fingerprint of samsung/a3y17ltedx/a3y17lte:8.0.0/R16NW/A320YDXU4CSB3:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed apps t...

Code injection

The Samsung A3 Android device with a build fingerprint of samsung/a3y17ltedx/a3y17lte:8.0.0/R16NW/A320YDXU4CSB3:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed apps t...

Input validation

The Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onceea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=28, versionName=9 that allows unauthorized microphone audio...

CVE-2019-15475

CVE-2019-15475 concerns a pre-installed com.qualcomm.qti.callenhancement app on Xiaomi Mi A3 (build fingerprint xiaomi/onc_eea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys). The root cause is an access control issue in that app that enables unauthorized microphone audio recording via...

CVE-2019-15475

The Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onceea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=28, versionName=9 that allows unauthorized microphone audio...

CVE-2019-15433

The CVE-2019-15433 entry concerns Samsung A3 devices running Android 8.0.0 (build fingerprint samsung/a3y17ltedx/a3y17lte:8.0.0/R16NW/A320YDXU4CSB3:user/release-keys). A pre-installed app, com.samsung.android.themecenter (versionCode 7000000, versionName 7.0.0.0), exposes a component that can be ...

CVE-2019-15433

The Samsung A3 Android device with a build fingerprint of samsung/a3y17ltedx/a3y17lte:8.0.0/R16NW/A320YDXU4CSB3:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed apps t...

WordPress Sender 0.7 Cross Site Scripting / Cross Site Request Forgery Vulnerabilities

Exploit for php platform in category web applications WordPress Sender 0.7 Cross Site Scripting / Cross Site Request Forgery Vulnerabilities Plugin Name : Sender Effected Version : 0.7 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula...

TangoBB 1.5.0-A3 Cross Site Scripting

Exploit Title: TangoBB 1.5.0-A3 XSS Vulnerability Google Dork: "Powered by TangoBB" Date: 24-2-2015 Exploit Author: Dennis Veninga Vendor Homepage: https://github.com/Codetana/TangoBB Version: 1.5.0-A3 Tested on: Firefox 36 & Chrome 38 / W8.1-x64 CVE : NONE Published: 24-2-2015 Vendor updated:...

Halon Security Router (SR) 3.2-winter-r1 - Multiple Vulnerabilities

Halon Security Router SR 3.2-winter-r1 - Multiple Vulnerabilities ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia...

SimpleRisk 20130915-01 - Multiple Vulnerabilities

Exploit for php platform in category web applications 1. Advisory Information Title: SimpleRisk v.20130915-01 CSRF-XSS Account Compromise Advisory ID: RS-2013-0001 Date Published: 2013-09-30 2. Vulnerability Information Type: Cross-Site Request Forgery CSRF CWE-352, OWASP-A8, Cross-Site Scripting...

Fedora 19 : python-backports-ssl_match_hostname-3.2-0.3.a3.fc19 (2013-8746)

Fixes CVE-2013-2098 -- Denial of Service with SSL certificates which have specially crafted wildcard patterns. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...