PT-2021-16628

Name of the Vulnerable Software and Affected Versions: Tizen FOTA service versions prior to Firmware update JUL-2021 Release Description: The issue is related to improper access control in the Tizen FOTA service, allowing attackers to execute arbitrary code by replacing the FOTA update file...

CVE-2021-25436: Improper Input Validation

Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Accessory Protocol...

PT-2021-16627

Name of the Vulnerable Software and Affected Versions: Tizen FOTA service versions prior to Firmware update JUL-2021 Release Description: The issue is related to improper input validation in the Tizen FOTA service, which allows for arbitrary code execution via the Samsung Accessory Protocol...

'Undeletable' Malware Shows Up in Yet Another Android Device

Security researchers have identified yet another Android-based mobile device available through the government-funded Lifeline Assistance Program pre-loaded with malware, a discovery adding evidence to the disturbing trend of smartphones infected with undeletable malicious code upon purchase. Hard...

CVE-2017-14869

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while performing update of FOTA partition, uninitialized data can be pushed to storage...

CVE-2017-14869

CVE-2017-14869 affects Android for MSM, Firefox OS for MSM, QRD Android with CAF Linux kernel in the FOTA update path. The issue is that during FOTA partition updates, uninitialized data can be pushed to storage, potentially leaking information. The provided sources confirm affected platforms and...

CVE-2017-14869

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while performing update of FOTA partition, uninitialized data can be pushed to storage...

CVE-2017-14869: Exposure of Sensitive Information to an Unauthorized Actor

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while performing update of FOTA partition, uninitialized data can be pushed to storage...

PT-2018-5726

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: The issue occurs during the update of the FOTA partition in the mentioned operating...

fota.t-mobile.com XSS vulnerability

Vulnerable URL: http://fota.t-mobile.com/jsp/login/login.jsp?url=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 02.01.2018 Latest check for patch:| 02.01.2018 20:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

Adups Local Information Disclosure Vulnerability

Adups Fota is a professional wireless upgrade solution for IoT devices smart car, wearable, home, VR, etc. from Shanghai Guangsheng Information Technology Co. Adups suffers from a local information disclosure vulnerability. The vulnerability is caused by the AndroidManifest.xml file of the...

Adups Local Elevation of Privilege Vulnerability

Adups Fota is a professional wireless upgrade solution for IoT devices smart car, wearable, home, VR, etc. from Shanghai Guangsheng Information Technology Co. Adups suffers from a local elevation of privilege vulnerability. The vulnerability is caused by setting the android: sharedUserId attribut...

Adups Fota Information Disclosure Vulnerability

Adups Fota is a professional wireless upgrade solution for IoT devices smart car, wearable, home, VR, etc. from Shanghai Guangsheng Information Technology Co. Adups suffers from an information disclosure vulnerability. The vulnerability arises due to the AndroidManifest.xml file of the...

Multiple Local Elevation of Privilege Vulnerabilities in Adups

Adups Fota is a professional wireless upgrade solution for IoT devices smart car, wearable, home, VR, etc. from Shanghai Guangsheng Information Technology Co. Adups suffers from multiple local elevation of privilege vulnerabilities. An attacker can exploit this vulnerability to elevate privileges...

System privilege elevation vulnerability in Guangsheng FOTA service for multiple mtk platform phones (Phantom Vulnerability)

Shanghai Guangsheng Information Technology Co., Ltd. is the world's leading provider of terminal management cloud platform, FOTA Wireless Upgrade provides professional wireless upgrade solutions for IoT devices smart car, wearable, home, VR, etc.. System privilege elevation vulnerability exists i...

D-Link DWR-932B LTE router found multiple Backdoor-vulnerability warning-the black bar safety net

! If you have a similar to the DWR-9 3 2 B LTE D-Link router, don't wait for it to slow a firmware upgrade, or directly to give it is better. Allegedly the D-Link DWR-9 3 2 B LTE has more than 2 0 at risk, including Backdoor accounts, the default certificate, leakage of certificate, the firmware...

Dlink DWR-932B router is explosion multiple security vulnerabilities-vulnerability warning-the black bar safety net

Foreword According to security experts the latest discovery, the Dlink DWR-932B router in the presence of a large number of security vulnerabilities, including back doors, the back door account, the weak WPS, as well as a remote code execution vulnerability and so on. If you're on IOT Security...

D-Link DWR-932B Backdoors / Default WPS PIN

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Multiple vulnerabilities found in the Dlink DWR-932B backdoor, backdoor accounts, weak WPS, RCE ... Advisory URL: https://pierrekim.github.io/advisories/2016-dlink-0x00.txt Blog URL:...

Quanta LTE Router Code Execution / Backdoor Accounts

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Multiple vulnerabilities found in Quanta LTE routers backdoor, backdoor accounts, RCE, weak WPS ... Advisory URL: https://pierrekim.github.io/advisories/2016-quanta-0x00.txt Blog URL:...