CVE-2018-18472

Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...

CVE-2019-5283

There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...

CVE-2019-5283

There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...

CVE-2019-5297

Emily-L29C Huawei phones versions earlier than 9.0.0.159 C185E2R1P12T8 have a Factory Reset Protection FRP bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obta...

CVE-2019-5297

Emily-L29C Huawei phones versions earlier than 9.0.0.159 C185E2R1P12T8 have a Factory Reset Protection FRP bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obta...

Design/Logic Flaw

There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...

CVE-2019-5283

There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...

Design/Logic Flaw

There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...

CVE-2019-5306

There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...

CVE-2019-5297

Emily-L29C Huawei phones versions earlier than 9.0.0.159 C185E2R1P12T8 have a Factory Reset Protection FRP bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obta...

CVE-2019-5306

There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...

Calibration Attack Drills Down on iPhone, Pixel Users

A proof-of-concept for a new type of privacy attack, dubbed “calibration fingerprinting,” uses data from Apple iPhone sensors to construct a globally unique fingerprint for any given mobile user. Researchers said that this provides an unusually effective means to track people as they browse acros...

Servicing stack update for Windows 10, Version 1709: May 14, 2019

None None...

Servicing stack update for Windows 10, Version 1703: May 14, 2019

None None...

Servicing stack update for Windows 10, Version 1903: May 14, 2019

None None...

Servicing stack update for Windows 10, Version 1507: May 14, 2019

None None...

Servicing stack update for Windows 10, version 1607 and Windows Server 2016: May 14, 2019

None None...

Rockwell Automation/Allen-Bradley Multiple Devices Denial of Service

Binary data 720096.prm...

CVE-2019-7746

JioFi 4 jmr1140 AmtelJMR1140R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmapauth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset...

Cross site request forgery (csrf)

JioFi 4 jmr1140 AmtelJMR1140R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmapauth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset...