314 matches found
CVE-2020-10272
MiR100, MiR200 and other MiR robots use the Robot Operating System ROS default packages exposing the computational graph without any sort of authentication. This allows attackers with access to the internal wireless and wired networks to take control of the robot seamlessly. In combination with...
pontiac.mi.us Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1183750 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Xiaomi tech Xiaomi 6 phone has denial of service vulnerability
Xiaomi Mi Phone 6 is a flagship device officially announced on April 19, 2017 by Xiaomi. Xiaomi Technology Xiaomi Phone 6 has a denial of service vulnerability that can be exploited by attackers to cause the device to crash...
Change This Browser Setting to Stop Xiaomi from Spying On Your Incognito Activities
If you own a Xiaomi smartphone or have installed the Mi browser app on any of your other brand Android device, you should enable a newly introduced privacy setting immediately to prevent the company from spying on your online activities. The smartphone maker has begun rolling out an update to its...
Change This Browser Setting to Stop Xiaomi from Spying On Your Incognito Activities
If you own a Xiaomi smartphone or have installed the Mi browser app on any of your other brand Android device, you should enable a newly introduced privacy setting immediately to prevent the company from spying on your online activities. The smartphone maker has begun rolling out an update to its...
CVE-2020-10377
A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials...
CVE-2020-9379
The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive information. A successful exploit could allow unauthorized access to user conversations...
mi-sci.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1062491 Security Researcher trackthehack Helped patch 66 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting mi-sci.org website and i...
CVE-2019-19463
The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...
Design/Logic Flaw
The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...
CVE-2019-19463
The CVE-2019-19463 entry concerns the Anhui Huami Mi Fit Android app prior to version 4.0.11, where the update check is performed without encryption. This unencrypted update check constitutes the root cause, potentially enabling tampering with update responses and affecting integrity of updates. ...
CVE-2019-19463
The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...
Xiaomi Mi Box Memory Corruption Vulnerability
Xiaomi Mi Box is a Xiaomi set-top box application. Xiaomi Mi Box suffers from a memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, potentially resulting in a denial of service condition...
Xiaomi Mi Box Display Corruption Exploit
The vulnerability allows rescaling and corrupting the Xiaomi Mi Box model: MIBOX3, build.id : MHC19 display without any privilege requirement, thus creating an opportunity for a non-privilege malicious app to disable the basic functionalities that the TV box is offering or can even be used for...
Xiaomi Mi Box Display Corruption
HI, I would like to report a security vulnerability in Xiaomi Mi Box model: MIBOX3, build.id : MHC19. The vulnerability allows rescaling and corrupting the display without any privilege requirement, thus creating an opportunity for a non-privilege malicious app to disable the basic functionalitie...
Xiaomi Mi Mix has an unspecified vulnerability
The Xiaomi Mi Mix is a smartphone from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in Xiaomi Mi Mix build fingerprint: Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys in Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1 A security vulnerability exists in...
Xiaomi Mi Pad 4 Access Control Error Vulnerability
The Xiaomi Mi Pad 4 is a tablet computer from Chinese company Xiaomi Technology Xiaomi. The Xiaomi Mi Pad 4 build fingerprint: Xiaomi/clover/clover:8.1.0/OPM1.171019.019/V9.6.26.0.ODJCNFD:user/release-keys contains a com.qualcomm.qti. An access control error vulnerability exists in the...
Xiaomi Mi A3 Access Control Error Vulnerability
The Xiaomi Mi A3 is a smartphone from Chinese company Xiaomi Technology Xiaomi. The Xiaomi Mi A3 build fingerprint: xiaomi/onceea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains an access control error in the com.qualcomm.qti. An access control error vulnerability exists in the...
Xiaomi Mi Mix 2S Access Control Error Vulnerability
Xiaomi Mi Mix 2S is a smartphone from Chinese company Xiaomi Technology Xiaomi. Xiaomi Mi Mix 2S build fingerprint: Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains an access control error in the com.qualcomm.qti An access control error vulnerability exist...
Xiaomi Mi Mix 2S Access Control Error Vulnerability (CNVD-2019-41691)
Xiaomi Mi Mix 2S is a smartphone from Chinese company Xiaomi Technology Xiaomi. A vulnerability in the Xiaomi Mi Mix 2S build fingerprint: Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys in the com.huaqin. An access control error vulnerability exists in the factor...