CVE-2022-39012

Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watch's application service abnormal...

CVE-2022-45874

Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file...

Huawei Aslan-AL10 输入验证错误漏洞

Huawei Aslan-AL10 is a children's smartwatch from Huawei China. A security vulnerability exists in Huawei Aslan-AL10, which stems from an improper input validation vulnerability that could lead to abnormal watch application services...

Huawei Aslan-AL10 安全漏洞

Huawei Aslan-AL10 is a children's smartwatch from Huawei China. The Huawei Aslan-AL10 suffers from a security vulnerability that stems from the presence of an improper authorization vulnerability that could allow an attacker to access specific files...

CVE-2022-45874

Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file...

PT-2022-27664 · Huawei · Huawei Aslan Children'S Watch

Name of the Vulnerable Software and Affected Versions: Huawei Aslan Children's Watch affected versions not specified Description: The issue is related to an improper authorization vulnerability. If successfully exploited, it could allow an attacker to access certain files. Recommendations: At the...

CVE-2022-39012

CVE-2022-39012 concerns the Huawei Aslan Children’s Watch, where an improper input validation vulnerability may cause the watch’s application service to become abnormal following a successful exploit. The issue originates from input validation weaknesses in the device’s software, as reported acro...

CVE-2022-45874

CVE-2022-45874 concerns Huawei Aslan Children’s Watch with an improper authorization vulnerability. Multiple sources (NVD, Red Hat, CNNVD, PRION, PT-Security, and Huawei PSIRT) describe that a successful exploit could allow access to certain files on the device. The Huawei advisory confirms the C...

Huawei Aslan-AL10 路径遍历漏洞

Huawei Aslan-AL10 is a children's smartwatch from Huawei China. A security vulnerability exists in Huawei Aslan-AL10 that stems from the presence of a path traversal vulnerability that could allow an attacker to access or modify protected system resources...

PT-2022-27250 · Huawei · Huawei Aslan Children'S Watch

Name of the Vulnerable Software and Affected Versions: Huawei Aslan Children's Watch affected versions not specified Description: The issue is related to a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources. Recommendations: At...

CVE-2022-44564

Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources...

NewsLister - Authenticated Persistent Cross-Site Scripting

Exploit Title: NewsLister - Authenticated Persistent Cross-Site Scripting Date: 2020-11-27 Exploit Author: Emre Aslan Vendor Homepage: https://www.netartmedia.net/newslister.html Tested on: Windows & XAMPP == PoC HTTP Request == GET /admin/index.php?page=add HTTP/1.1 Host: 127.0.0.1:8080...

LG-Ericsson iPECS NMS 30M Directory Traversal

Exploit Title: LG-Ericsson iPECS NMS 30M - Directory Traversal Shodon Dork: iPECS CM Exploit Author: Safak Aslan Software Link: www.ipecs.com Version: 30M System Authentication Required: No Tested on: Linux CVE: N/A Description The directory traversal was detected on LG-Ericsson's iPECS product...

Merge PACS 7.0 - Cross-Site Request Forgery Vulnerability

Exploit for linux platform in category web applications Exploit Title: Merge PACS 7.0 - Cross-Site Request Forgery Exploit Author: Safak Aslan Vendor Homepage: http://www.merge.com/ Version: Merge PACS 7.0 Tested on: Windows CVE: - 1. Proof of Concept history.pushState'', '', '/' Post Data: POST...