1312 matches found
CVE-2019-13402
/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete factory-reset process. A backdoor can persist because neither system accounts nor the set of services is reset...
CVE-2019-13402
CVE-2019-13402 affects Dynacolor FCM-MB40 devices (v1.2.0.0). The issue stems from an incomplete factory-reset process implemented by /usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi, which fails to reset system accounts and the full set of services. This can allow...
FortiCam FCM-MB40 Code Execution / Privilege Escalation
Original posting: https://xor.cat/2019/06/19/fortinet-forticam-vulns/ Background In March of 2019 I discovered five vulnerabilities in Fortinet's FortiCam FCM-MB401 product. Part-way through disclosing this vulnerability, I discovered that the FCM-MB40 is manufactured by a company called Dynacolo...
CVE-2018-18472
Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...
Design/Logic Flaw
Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...
CVE-2018-18472
Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...
CVE-2018-18472
Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...
CVE-2019-5297
Emily-L29C Huawei phones versions earlier than 9.0.0.159 C185E2R1P12T8 have a Factory Reset Protection FRP bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obta...
CVE-2019-5283
There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...
CVE-2019-5283
There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...
Design/Logic Flaw
There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...
CVE-2019-5297
Emily-L29C Huawei phones versions earlier than 9.0.0.159 C185E2R1P12T8 have a Factory Reset Protection FRP bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obta...
CVE-2019-5283
There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...
Design/Logic Flaw
There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...
CVE-2019-5306
There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...
CVE-2019-5297
Emily-L29C Huawei phones versions earlier than 9.0.0.159 C185E2R1P12T8 have a Factory Reset Protection FRP bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obta...
CVE-2019-5306
There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...
Calibration Attack Drills Down on iPhone, Pixel Users
A proof-of-concept for a new type of privacy attack, dubbed “calibration fingerprinting,” uses data from Apple iPhone sensors to construct a globally unique fingerprint for any given mobile user. Researchers said that this provides an unusually effective means to track people as they browse acros...
