Huawei Taurus-AL00B Information Disclosure Vulnerability

The Huawei Taurus-AL00B is a smartphone from the Chinese company Huawei Huawei. An information disclosure vulnerability exists in previous versions of Huawei Taurus-AL00B 10.0.0.205 C00E201R7P2, which stems from a program that fails to adequately authenticate a user's identity, and can be exploit...

CVE-2020-3919

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2020-3892

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2020-3905

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges...

Hackers exploiting vulnerable routers to drop malicious “WHO” COVID-19 app

By Sudais Asif In the wake of the Coronavirus or COVID-19 pandemic, we've seen cybercriminals take full advantage and launch different attacks as we covered them recently on HackRead.com. This is a post from HackRead.com Read the original post: Hackers exploiting vulnerable routers to drop...

Apple macOS Catalina AppleGraphicsControl Component Memory Corruption Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.AppleGraphicsControl is one of the graphics control components. A memory corruption vulnerability exists in the AppleGraphicsControl component in Apple macOS Catalina versions prior to 10.15.4. An attacker...

Memory Corruption Vulnerability in Kernel Component of Multiple Apple Products (CNVD-2020-22118)

Apple iOS is an operating system developed for mobile devices.Apple watchOS is an operating system for smartwatches.Apple iPadOS is an operating system for iPad tablets.Kernel is a kernel component of the operating system.Apple watchOS is a smartwatch operating system.Apple watchOS is a smartwatc...

Apple macOS Catalina Bluetooth component memory corruption vulnerability (CNVD-2020-22464)

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A memory corruption vulnerability exists in the Bluetooth component in Apple macOS Catalina versions prior to 10.15.4. An attacker can exploit this vulnerabili...

CVE-2020-1878

Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152DC735E152R3P3,versions earlier than 10.0.1.160C00E160R4P1 have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to...

Huawei Honor V30 OxfordS-AN00A Authorization Issues Vulnerability

Huawei Honor V30 is a smartphone from Chinese company Huawei Huawei. An authorization issue vulnerability exists in Huawei Honor V30 OxfordS-AN00A prior version 10.0.1.167 C00E166R4P1. An attacker can exploit the vulnerability to obtain partial information with the help of a malicious application...

CVE-2020-1812

HUAWEI P30 smartphones with versions earlier than 10.0.0.173C00E73R1P11 have an improper authentication vulnerability. Due to improperly validation of certain application, an attacker should trick the user into installing a malicious application to exploit this vulnerability. Successful exploit...

CVE-2019-2200

In updatePermissions of PermissionManagerService.java, it may be possible for a malicious app to obtain a custom permission from another app due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

CVE-2019-2200

In updatePermissions of PermissionManagerService.java, it may be possible for a malicious app to obtain a custom permission from another app due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

Huawei Honor V30 License Issue Vulnerability

Huawei Honor V30 is a smartphone. An authorization issue vulnerability exists in previous versions of Huawei Honor V30 10.0.1.135 C00E130R4P1, which arises from an application in the system failing to perform proper identity checks on another application calling its interface, and can be exploite...

Tricky Phish Angles for Persistence, Not Passwords

Late last year saw the re-emergence of a nasty phishing tactic that allows the attacker to gain full access to a user's data stored in the cloud without actually stealing the account password. The phishing lure starts with a link that leads to the real login page for a cloud email and/or file...

CVE-2019-14843

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped with Red Hat Jboss E...

Design/Logic Flaw

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped with Red Hat Jboss E...

CVE-2019-14843

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped with Red Hat Jboss E...

CVE-2020-1785

Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2020-02948)

Huawei Honor V10 and others are products of Huawei, a Chinese company.Huawei Honor V10 is a smartphone product.Huawei Honor 10 is a smartphone product.Mate 10 Pro is a smartphone product. A denial-of-service vulnerability exists in multiple huawei phones. the vulnerability stems from the system...