Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x software. There is a Factory Reset Protection FRP bypass via the voice assistant because Internet access begins before the Setup Wizard finishes. The Samsung ID is SVE-2018-12894 November 2018...

Command injection

An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.58.10. Attackers can activate the failsafe mode during the boot process, and use the miconsole command cascaded by the SN code shown on the product to get the root shell password, and then the attacker can i read Wi-Fi SSID or password, ...

CVE-2020-10262

An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.58.10. Attackers can activate the failsafe mode during the boot process, and use the miconsole command cascaded by the SN code shown on the product to get the root shell password, and then the attacker can i read Wi-Fi SSID or password, ...

CVE-2018-21047

An issue was discovered on Samsung mobile devices with O8.x software. There is a Factory Reset Protection FRP bypass via the voice assistant because Internet access begins before the Setup Wizard finishes. The Samsung ID is SVE-2018-12894 November 2018...

CVE-2020-11602

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Google Assistant leaks clipboard contents on a locked device. The Samsung ID is SVE-2019-16558 April 2020...

CVE-2020-11602

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Google Assistant leaks clipboard contents on a locked device. The Samsung ID is SVE-2019-16558 April 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Google Assistant leaks clipboard contents on a locked device. The Samsung ID is SVE-2019-16558 April 2020...

CVE-2020-11602

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Google Assistant leaks clipboard contents on a locked device. The Samsung ID is SVE-2019-16558 April 2020...

CVE-2020-11602

Technical details about CVE-2020-11602 are not publicly available in the provided documents. Monitor for updates from NVD/Red Hat/CVE sources as more information may be released.

CVE-2020-10263 - Smart Speaker Root Shell via internal UART

An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4. Attackers can get root shell by accessing the UART interface and then they can i read Wi-Fi SSID or password, ii read the dialogue text files between users and XIAOMI XIAOAI speaker Pro LX06, iii use Text-To-Speech tools pretend...

Command Execution Vulnerability in Reliance Assistant Win Edition

Dependable Assistant is an emulator that allows you to experience Android apps and games on your computer. A command execution vulnerability exists in the Win version of Leaning Assistant, which can be exploited by attackers to execute malicious code...

Tencent's Handheld Assistant suffers from a command execution vulnerability

Tencent hand game assistant is tencent a hand game simulator. Tencent Handicap Assistant has a command execution vulnerability that can be exploited by attackers to execute malicious code...

HPSBGN03662 rev. 1 - HP Support Assistant Potential Escalation of Privilege and Arbitrary File Deletion

Potential Security Impact Potential escalation of privilege and arbitrary file deletion. VULNERABILITY SUMMARY Potential escalation of privilege and arbitrary file deletion vulnerabilities have been identified with certain versions of HP Support Assistant. RESOLUTION A patch was released on April...

CVE-2019-20599

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Voice Assistant mishandles the notification audibility of a secured app. The Samsung ID is SVE-2018-13326 May 2019...

CVE-2019-20599

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Voice Assistant mishandles the notification audibility of a secured app. The Samsung ID is SVE-2018-13326 May 2019...

Code injection

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Voice Assistant mishandles the notification audibility of a secured app. The Samsung ID is SVE-2018-13326 May 2019...

CVE-2019-20599

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Voice Assistant mishandles the notification audibility of a secured app. The Samsung ID is SVE-2018-13326 May 2019...

CVE-2019-20599

Technical details for CVE-2019-20599 are not publicly available in the provided documents. The connected sources repeat the same description without concrete exploit, impact, vulnerable components, or fixes. Monitor for updates from official advisories.

Tencent's handheld game assistant has a code execution vulnerability

Tencent Handheld Assistant is a software that allows users to play mobile games on their computer. A code execution vulnerability exists in Tencent Handheld Game Assistant, which can be exploited by an attacker to execute arbitrary code...

Voice assistant devices can be manipulated with ultrasonic waves

By Sudais Asif A new type of attack called "SurfingAttack" can be used against voice assistant devices like Siri. This is a post from HackRead.com Read the original post: Voice assistant devices can be manipulated with ultrasonic waves...