CVE-2021-46834

A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225C00E220R3P4...

CVE-2021-46834

CVE-2021-46834 describes a permission-bypass vulnerability in Huawei’s cross-device task management affecting Huawei JAD-AL50 software (version 102.0.0.225). The flaw permits an attacker with local access and low privileges, with no user interaction, to access certain resources on the attacked de...

CVE-2021-46834

A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225C00E220R3P4...

PT-2022-4288 · Huawei · Huawei Jad-Al50

Name of the Vulnerable Software and Affected Versions: Huawei JAD-AL50 version 102.0.0.225C00E220R3P4 Description: A permission bypass issue in Huawei's cross-device task management could allow an attacker to access certain resources on the attacked devices. This is related to insecure privilege...

SUSE: Security Advisory (SUSE-SU-2022:0283-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Blackberry BlackBerry UEM 信息泄露漏洞

Blackberry BlackBerry UEM is a cross-device platform for device, application and content management from Blackberry Canada. The platform allows organizations to view all users, devices, applications, and policies in their environment through a single, integrated management panel. A security...

Blackberry BlackBerry UEM 输入验证错误漏洞

Blackberry BlackBerry UEM is a cross-device platform for device, application and content management from Blackberry Canada. The platform allows organizations to view all users, devices, applications, and policies in their environment through a single, integrated management panel. A security...

Blackberry BlackBerry UEM 安全漏洞

Blackberry BlackBerry UEM is a cross-device platform for device, application and content management from Blackberry Canada. The platform allows organizations to view all users, devices, applications, and policies in their environment through a single, integrated management panel. A security...

CVE-2020-0448

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

D-Link DIR-825AC G1 Access Control Error Vulnerability

The D-Link DIR-825 is an AC 1200 Wi-Fi dual-band Gigabit LAN/WAN router. A security vulnerability exists in the D-link DIR-825AC G1. The vulnerability stems from insufficient isolation between a host network and a client network established by the same device. An attacker could exploit the...

Cairo: Denial of service

Background Cairo is a 2D vector graphics library with cross-device output support. Description Multiple vulnerabilities have been discovered in Cairo. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There ...

CVE-2016-10653

xd-testing is a testing library for cross-device XD web applications. xd-testing downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the...

CVE-2016-10653

CVE-2016-10653 concerns the xd-testing package, where the library downloads binary resources over HTTP. The root issue is insecure HTTP transfer of executables, enabling a network-position attacker to intercept the response and replace the binary, potentially leading to remote code execution on t...

CVE-2016-10536

The CVE-2016-10536 issue affects engine.io-client (Socket.IO) prior to 1.6.9, where the client passes a settings object containing rejectUnauthorized; if not explicitly set, it can be passed as null, disabling certificate verification and exposing users to Man-in-the-Middle attacks. This behavior...

How do I know if I'm Secure?

Remember those commercials for excessive cell phone roaming coverage? The ones with clever skits highlighting the end user having no idea that their phone had crossed an invisible border and switched from primary to roaming coverage? Immediately incurring increased costs for calling, texting and...

Hundreds of Apps Using Ultrasonic Signals to Silently Track Smartphone Users

Your smartphone may have some apps that are continuously listening inaudible, high-frequency ultrasonic sounds from your surroundings and they know where you go, what you like and dislike — all without your knowledge. Ultrasonic Cross-Device Tracking is a new technology that some marketers and...

Деанонимизация пользователей Darknet(TOR, i2p(d), etc) & SOX &VPN аудиозакладками

Вообщем то ссылка на 33с3 уже была запощена в основном топике, но я хотел бы акцентировать общее внимание на презентацию Talking Behind Your Back On the Privacy & Security of the Ultrasound Tracking Ecosystem от Vasilios Mavroudis и Federico Maggi. Вкратце, суть такова: В 2012 году была основана...

Cisco Meraki MS MRMX Arbitrary Command Execution Vulnerability

The Cisco Meraki MS MRMX is a cloud-managed wireless networking device from Cisco. The Cisco Meraki MS MRMX arbitrary command execution vulnerability allows remote attackers to execute arbitrary commands by leveraging knowledge of cross-device secrets and per-device secrets...