EUVD-2017-17139

Malware in sbrugna...

EUVD-2017-8315

Malware in sbrugna...

CVE-2017-17149

Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. It needs to verify the user's Huawei ID during lock pattern change. An attacker with root privilege who gets a user's smart phone may bypass Huawei ID verification by special operation. Successf...

Hardcoded credentials

Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. It needs to verify the user's Huawei ID during lock pattern change. An attacker with root privilege who gets a user's smart phone may bypass Huawei ID verification by special operation. Successf...

CVE-2017-17149

Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. It needs to verify the user's Huawei ID during lock pattern change. An attacker with root privilege who gets a user's smart phone may bypass Huawei ID verification by special operation. Successf...

CVE-2017-17149

Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. It needs to verify the user's Huawei ID during lock pattern change. An attacker with root privilege who gets a user's smart phone may bypass Huawei ID verification by special operation. Successf...

CVE-2017-17149

CVE-2017-17149 concerns Huawei HiWallet App (versions before 8.0.4). The flaw allows an attacker with root access on a user’s device to bypass Huawei ID verification during lock-pattern change and change the lock pattern. Root-privileged exploitation is the condition; impact is the ability to mod...

CVE-2017-17149: Undefined Security Weakness

Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. It needs to verify the user's Huawei ID during lock pattern change. An attacker with root privilege who gets a user's smart phone may bypass Huawei ID verification by special operation. Successf...

PT-2018-6417

Name of the Vulnerable Software and Affected Versions: Huawei HiWallet App versions prior to 8.0.4 Description: The issue allows an attacker with root privilege to bypass Huawei ID verification during lock pattern change by performing a special operation. This can enable the attacker to change th...

Security Advisory - Arbitrary Lock Pattern Change Vulnerability in Huawei HiWallet APP

Huawei HiWallet App has an arbitrary lock pattern change vulnerability. It needs to verify the user's Huawei ID during lock pattern change. An attacker with root privilege who gets a user's smart phone may bypass Huawei ID verification by special operation. Successful exploit of this vulnerabilit...

CVE-2017-8177

Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking...

CVE-2017-8177

Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking...

Design/Logic Flaw

Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking...

CVE-2017-8177

CVE-2017-8177 affects Huawei APP HiWallet versions older than 5.0.3.100, where APK signature verification is not performed. The underlying issue is lack of APK signature verification, enabling an attacker to hijack and replace the APK, potentially leading to app hijacking. Public sources confirm ...

CVE-2017-8177

Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking...

PT-2017-18182

Name of the Vulnerable Software and Affected Versions Huawei APP HiWallet versions earlier than 5.0.3.100 Description The issue allows an attacker to exploit the lack of signature verification for APK files, potentially leading to the hijacking of the APP by uploading a modified APK file. This...

CVE-2017-8177: Improper Verification of Cryptographic Signature

Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking...

CVE-2017-2704: Exposure of Sensitive Information to an Unauthorized Actor

Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skyto...

PT-2017-15491

Name of the Vulnerable Software and Affected Versions Smarthome versions 1.0.2.364 and earlier HiAPP versions 7.3.0.303 and earlier HwParentControl versions 2.0.0 and earlier HwParentControlParent versions 5.1.0.12 and earlier Crowdtest versions 1.5.3 and earlier HiWallet versions 8.0.0.301 and...