CVE-2018-15006

The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platform app with a package name of com.android.zte.hiddenmenu versionCode=23, versionName=6.0.1 that contains an exported broadcast receiver ap...

CVE-2018-15006

CVE-2018-15006: Affected device and component details : The ZTE ZMAX Champ (Android 6.0.1, build ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys) contains a pre-installed platform app with package com.android.zte.hiddenmenu. It includes an exported broadcast receiver, CommandRec...

LG Optimus G Command Injection

Device: LG Optimus G E973 Others affected Firmware: Android 4.1.2 JZO54k Others affected Evidence: http://youtu.be/ZfbDIpTY-t4 A vulnerability in LG's "HiddenMenu" allows you to execute shell commands as the system, with a large array of additional permissions Groups. This vulnerability opens up...