Login Bypass Vulnerability in Charging Pile Operation Management System of Shenzhen Crestec Technology Co.

Shenzhen Crestec Technology Co., Ltd. is a technology enterprise engaged in the research, development, manufacturing and sales of UPS uninterruptible power supply, server room integration, maintenance-free lead-acid batteries, inverter power supply. A login bypass vulnerability exists in the...

CVE-2020-11832

In functions charginglimitcurrentwrite and charginglimittimewrite in /SM8250QMaster/android/vendor/oppocharger/oppo/oppocharger.c have not checked the parameters, which causes a vulnerability...

CVE-2020-11834

CVE-2020-11834 affects the file path /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c, where the function proc_fastchg_fw_update_write does not validate the length parameter, creating a vulnerability. Referenced in multiple sources (Red Hat, NVD, CVE databases) with the same descript...

CVE-2020-11832

In functions charginglimitcurrentwrite and charginglimittimewrite in /SM8250QMaster/android/vendor/oppocharger/oppo/oppocharger.c have not checked the parameters, which causes a vulnerability...

PT-2020-12880

Name of the Vulnerable Software and Affected Versions Oppo Charger affected versions not specified Description The issue is related to the functions charging limit current write and charging limit time write in the file /SM8250 Q Master/android/vendor/oppo charger/oppo/oppo charger.c. These...

Hacking a Power Supply

This hack targets the firmware on modern power supplies. Yes, power supplies are also computers. Normally, when a phone is connected to a power brick with support for fast charging, the phone and the power adapter communicate with each other to determine the proper amount of electricity that can ...

The vulnerability of the Enhanced Charging Service, a microprogramming-based software service for Cisco ASR 5000 routers, allows attackers to circumvent traffic classification rules and potentially avoid paying for the usage of network traffic.

The vulnerability of the Enhanced Charging Service provided by Cisco ASR 5000 router microprogramming software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass traffic classification rules and potentially avoid paying for t...

Unauthorized Access Vulnerability in Intelligent Parking Cloud Charging System of Chongqing Tedi Technology Co.

Chongqing Tedi Technology Co., Ltd. leads the development and construction of intelligent community cloud platform, to create a cloud community service platform based on the integration of webpage + WeChat + APP, centralized management and control of community intelligent equipment, including...

CVE-2020-3244

A vulnerability in the Enhanced Charging Service ECS functionality of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass the traffic classification rules on an affected device. The vulnerability is due to insufficient input validation of...

Cisco ASR 5000 Input Validation Error Vulnerability

Cisco ASR 5000 is a 5000 series gateway product from Cisco. An input validation error vulnerability exists in the Enhanced Charging Service ECS feature in Cisco ASR 5000 Series Aggregation Services Routers versions prior to Release 21.18.0. A remote attacker could exploit this vulnerability by...

CVE-2020-3244: Improper Input Validation

A vulnerability in the Enhanced Charging Service ECS functionality of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass the traffic classification rules on an affected device. The vulnerability is due to insufficient input validation of...

Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability

A vulnerability in the Enhanced Charging Service ECS functionality of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass the traffic classification rules on an affected device. The vulnerability is due to insufficient input validation of...

PT-2020-2981

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregation Services Routers affected versions not specified Description A vulnerability in the Enhanced Charging Service ECS functionality could allow an unauthenticated, remote attacker to bypass traffic classification...

e-charging-hamburg.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1161243 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting e-charging-hamburg.de...

SQL Injection Vulnerability in KTO's Fully Intelligent Parking Video Charging System

Xiamen KTO Communication Technology Co., Ltd. is a static transportation system solution provider. A SQL injection vulnerability exists in the KETO Fully Intelligent Parking Video Charging System. An attacker can exploit the vulnerability to obtain sensitive database information...

Virtual Freer 1.58 - Remote Command Execution

Exploit title : Virtual Freer 1.58 - Remote Command Execution Exploit Author : SajjadBnd Date : 2020-02-17 Vendor Homepage : http://freer.ir/virtual/ Software Link : http://www.freer.ir/virtual/download.php?action=get Software Linkmirror : http://dl.nuller.ir/virtualfreerv1.58NuLLeR.iR.zip Tested...

Securing Portable Electronic Devices During Travel

Holiday travelers often use portable electronic devices PEDs because they offer a range of conveniences, for example, enabling the traveler to order gifts on-the-go, access to online banking, or download boarding passes. However, these devices are vulnerable to cyberattack or theft, resulting in...

This iPhone charging cable can compromise your device & steal data

By Sudais "O.MG" - your iPhone charging cable is no longer safer. This is a post from HackRead.com Read the original post: This iPhone charging cable can compromise your device & steal data...

YouTuber hacks fingerprint scanner of OnePlus 7 Pro using hot glue

By Waqas The Youtuber also claimed that the OnePlus 7 Pro's fingerprint sensor is the quickest in-display sensor they have ever seen. The new OnePlus 7 Pro from OnePlus is definitely a refreshing change in the smartphones market because of its popup camera and triple cam setup, full-screen displa...

Weak Password Vulnerability in Campus Uniform Fee Collection System

Tianjin Shenzhou Haotian Technology Co., Ltd. is a high-tech enterprise integrating management software design, development, sales and service. There is a weak password vulnerability in the Campus Unified Charging System, which can be exploited by an attacker to log into the system to obtain...