CVE-2018-14993

The ASUS Zenfone V Live Android device with a build fingerprint of asus/VZWASUSA009/ASUSA009:7.1.1/NMF26F/14.0610.1802.78-20180313:user/release-keys and the Asus ZenFone 3 Max Android device with a build fingerprint of...

CVE-2018-15003

The Coolpad Defiant Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys and the T-Mobile Revvl Plus Coolpad/alchemy/alchemy:7.1.1/143.14.171129.3701A-TMO/buildfnj02-206:user/release-keys Android devices contain a pre-installed platform app with a package name of...

CVE-2018-15003

CVE-2018-15003 affects Coolpad Defiant and T-Mobile Revvl Plus devices with a pre-installed platform app com.qualcomm.qti.telephony.extcarrierpack (versionCode=25, versionName=7.1.1) containing an exported UiccReceiver that allows any app on the device to trigger a factory reset. The initiating a...

CVE-2018-14999

The CVE-2018-14999 entry describes a vulnerability in the Leagoo P1 where a pre-installed platform app com.wtk.factory contains an exported broadcast receiver (MMITestReceiver) that lets any co-located app trigger a factory reset without permissions. This could wipe all user data and apps on the ...

CVE-2018-14999

The Leagoo P1 device with a build fingerprint of sp7731c1h1032v4bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package name of com.wtk.factory versionCode=1, versionName=1.0 that contains an exported broadcast receiver named...

CVE-2018-14996

CVE-2018-14996 affects the Oppo F5 on OPPO/CPH1723 running Android 7.1.1, where a pre-installed platform app with package name com.dropboxchmod exposes an exported service DropboxChmodService . This service allows a co-located app with zero permissions to supply arbitrary commands to be executed ...

CVE-2018-14994

The Essential Phone Android device with a build fingerprint of essential/mata/mata:8.1.0/OPM1.180104.166/297:user/release-keys contains a pre-installed platform app with a package name of com.ts.android.hiddenmenu versionName=1.0, platformBuildVersionName=8.1.0 that contains an exported activity...

CVE-2018-14994

CVE-2018-14994 affects the Essential Phone on Android 8.1.0 where a pre-installed platform app (package: com.ts.android.hiddenmenu) exposes an activity (com.ts.android.hiddenmenu.rtn.RTNResetActivity) that can initiate a factory reset from any co-located app without permissions. This could lead t...

CVE-2018-14993

The CVE-2018-14993 issue affects ASUS Zenfone V Live (build asus/VZW_ASUS_A009/ASUS_A009:7.1.1) and Asus ZenFone 3 Max (build asus/US_Phone/ASUS_X008_1:7.0). A pre-installed platform app, com.asus.splendidcommandagent (versionCode 1510200090, versionName 1.2.0.18_160928), contains an exported ser...

CVE-2018-14993

The ASUS Zenfone V Live Android device with a build fingerprint of asus/VZWASUSA009/ASUSA009:7.1.1/NMF26F/14.0610.1802.78-20180313:user/release-keys and the Asus ZenFone 3 Max Android device with a build fingerprint of...

CVE-2018-14989

The Plum Compass Android device with a build fingerprint of PLUM/c179hwf221/c179hwf221:6.0/MRA58K/W16.51.5-22:user/release-keys contains a pre-installed platform app with a package name of com.android.settings versionCode=23, versionName=6.0-eng.root.20161223.224055 that contains an exported...

Oracle MySQL Connectors Installed (Linux)

Binary data mysqlconnectorsversionnix.nbin...

Google Warns of Growing Android Attack Vector: Backdoored SDKs and Pre-Installed Apps

Google is reporting an uptick in efforts by bad actors to plant potentially harmful applications PHAs on Android devices via pre-installed apps and by bundling them with system updates delivered over the air. The technique is especially troubling, Google said, because PHAs are often malicious and...

The vulnerability of the information collection tool for devices on the Cisco Common Services Platform Collector lies in the presence of a pre-installed account, which allows a perpetrator to gain access to the device.

The vulnerability of the device information collection tool in the Cisco Common Services Platform Collector relates to the presence of a pre-installed account. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device...

rdesktop Detection

Detects whether rdesktop is present on the target system and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

(0Day) (Pwn2Own) Google Android Contacts Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Google Android. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

The vulnerability in the web interface of software for network monitoring in Cisco Network Assurance Engine allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the software web interface for network monitoring in the Cisco Network Assurance Engine lies in the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...

LogMeIn Control Panel Installed (Windows)

Binary data logmeincontrolpanelwininstalled.nbin...

LogMeIn Client Installed (Windows)

Binary data logmeinclientwininstalled.nbin...

CVE-2018-19638 User can overwrite arbitrary log files in support tar

In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files...