CVE-2025-27389: Authentication Bypass by Spoofing

A flaw exists in the verification of application installation sources within ColorOS. Under specific conditions, this issue may cause the risk detection mechanism to fail, which could allow malicious applications to be installed without proper warning...

EUVD-2025-74040

An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces th...

EUVD-2017-11868

Malware in sbrugna...

PT-2023-12420

Name of the Vulnerable Software and Affected Versions App Lounge versions prior to 0.19q Description The issue arises from improper verification of applications' cryptographic signatures in the App Lounge client. This allows attackers who control the application server to install malicious...

CVE-2021-43171: Improper Verification of Cryptographic Signature

Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the server's API response...

Input validation

Nova 5i pro and Nova 5 smartphones with versions earlier than 9.1.1.190C00E190R6P2and Versions earlier than 9.1.1.175C00E170R3P2 have an improper validation of array index vulnerability. The system does not properly validate the input value before use it as an array index when processing certain...

CVE-2018-7947: Improper Authentication

Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153C00 have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific...

PT-2018-18345

Name of the Vulnerable Software and Affected Versions: Huawei mobile phones versions prior to 8.1.0.153C00 Description: The issue allows an attacker to bypass authentication on the device. This could be achieved by tricking the user into connecting to a malicious device. In debug mode, the...

CVE-2017-4951

VMware AirWatch Console 9.2.x before 9.2.2 and 9.1.x before 9.1.5 contains a Cross Site Request Forgery vulnerability when accessing the App Catalog. An attacker may exploit this issue by tricking users into installing a malicious application on their devices...