CVE-2018-7922

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150C432 have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to...

CVE-2018-7922

CVE-2018-7922 affects Huawei ALP-L09 smartphones with versions older than 8.0.0.150(C432). The vulnerability is described as an insufficient input validation due to lack of parameter checking in the smartphone’s software. An attacker with root privileges could trick the user into installing a cra...

CVE-2018-7923

Huawei Mate 10 ALP-L09 devices running versions older than 8.0.0.150 (C432) are affected by CVE-2018-7923 due to insufficient input validation from a lack of parameter checks. An attacker with root privileges can trick a user into installing a crafted app, which may modify specific data and ultim...

Huawei Mobile Phone Input Validation Vulnerability

Huawei Mate 10 ALP-L09 is a smartphone product of Chinese company Huawei Huawei. An input validation vulnerability exists in the Huawei Mate 10 ALP-L09 phone due to a lack of parameter checking. An attacker induces a user who has gained root privileges to install a carefully crafted application,...

CVE-2018-7993

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause...

CVE-2018-7993

CVE-2018-7993 concerns a use-after-free vulnerability in the mediaserver component on Huawei Mate 10 devices running versions before ALP-AL00 8.1.0.311. An attacker can entice a user to install a malicious app, which causes mediaserver to reference memory after it has been freed, enabling arbitra...

Design/Logic Flaw

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with R...

CVE-2018-7901

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with R...

Huawei ALP-AL00B and BLA-AL00B RCS Module Unauthorized Operation Vulnerability

Huawei ALP-AL00B and BLA-AL00B are both smartphone products from Huawei, China.RCS module is one of the converged communication modules. A security vulnerability exists in the RCS module in the Huawei ALP-AL00B before version 8.0.0.129 and the BLA-AL00B before version 8.0.0.129. An attacker can...

Alp Weather - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Alp Weather published at the 'play' market has multiple vulnerabilities...

ALP Abfall - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application ALP Abfall published at the 'play' market has multiple vulnerabilities...

Australian Newspaper Offices Raided in Hacking Inquiry

Detectives from Australia’s Victoria Police last week executed a raid of offices at The Age, one of the largest newspapers in Melbourne, seizing computers and documents they believe were used in a hacking scheme. Authorities spent eight hours removing computers that were purportedly used by...

CVE-2009-3221

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

CVE-2009-3221

The CVE-2009-3221 entry concerns a stack-based buffer overflow in Audio Lib Player (ALP) . The vulnerability is triggered by a long URL inside a .m3u playlist file , allowing a remote attacker to execute arbitrary code on affected systems. The root cause is a stack-based overflow in ALP when proc...

CVE-2006-1688

Summary of CVE-2006-1688 (and related CVE-2006-1610) : SQuery versions 4.5 and earlier contain multiple PHP remote file inclusion vulnerabilities that allow remote code execution via a URL in the libpath parameter to scripts in the lib/ directory (e.g., ase.php, devi.php, doom3.php, et.php, and o...

Security Patchs for PHP Products

PHPSecure made some patchs for security holes in PHP products. Here is the list : - ALP - Banner Ad 2.0 : http://www.phpsecure.org/index.php?id=1&zone=pDl More details : http://online.securityfocus.com/search?category=22&query=ALP - Tight Auction 3.0 :...