CVE-2019-18371

CVE-2019-18371 affects Xiaomi Mi WiFi R3G devices pre-2.28.23-stable. Root cause is a directory traversal via a misconfigured NGINX alias (api-third-party/download/extdisks../etc/config/account) that lets an attacker read arbitrary files and bypass authentication. Affected: Xiaomi Mi WiFi R3G rou...

CVE-2019-18370

The Xiaomi Mi WiFi R3G vulnerability (CVE-2019-18370) affects versions prior to 2.28.23-stable. The backup file (tar.gz) can be manipulated during upload, allowing control of contents in the decompressed directory via tar zxf. Additionally, the sh script used for testing speeds reads URLs from /t...

CVE-2019-18370

An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...

PT-2019-15380 · F5 +1 · Nginx +1

Name of the Vulnerable Software and Affected Versions: Xiaomi Mi WiFi R3G versions prior to 2.28.23-stable Description: A directory traversal issue allows attackers to read arbitrary files due to a misconfigured NGINX alias. This can be exploited via the...

Xiaomi Mi Home smart platform has information leakage vulnerability

Xiaomi Mijia Intelligent Platform is Xiaomi's open platform for the IoT field, which can realize the interconnection of consumer smart hardware such as smart home devices, smart home appliances, smart wearable devices, smart travel devices and other consumer smart hardware. Xiaomi Mijia intellige...

Reverse Engineering 4G Hotspots for fun, bugs and net financial loss

a.k.a. 4G hotspots and their Discontents You might be here because you saw our talk at Defcon 27. You might want to watch that for the full rundown! TL;DR We found multiple vulnerabilities in several well known vendors Mi-Fi devices, including pre- and post-auth command injection and code executi...

Xiaomi Mi 5s Plus Permission License and Access Control Issues Vulnerability

Xiaomi Mi 5s Plus is a smartphone from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in Xiaomi Mi 5s Plus. The vulnerability can be exploited by an attacker to cause an anomaly in the touchscreen with the help of a wireless signal between 198 kHz and 203 kHz...

CVE-2019-12762

CVE-2019-12762 affects Xiaomi Mi 5s Plus; a radio signal in the 198–203 kHz range can trigger touchscreen anomalies (Ghost Touch) via a transmitter/antenna hidden under a surface. Exploitation requires physical proximity; no remediation details are provided in the connected documents.

Command Execution Vulnerability in the mi***.php File of S-CMS Enterprise Website Builder System

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website builder system mi.php file there is a command execution vulnerability, an attacker can use the vulnerabilit...

CVE-2019-12165

MiCollab 7.3 PR2 7.3.0.204 and earlier, 7.2 7.2.2.13 and earlier, and 7.1 7.1.0.57 and earlier and MiCollab AWV 6.3 6.3.0.103, 6.2 6.2.2.8, 6.1 6.1.0.28, 6.0 6.0.0.61, and 5.0 5.0.5.7 have a Command Execution Vulnerability. Successful exploit of this vulnerability could allow an attacker to execu...

Code injection

The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service resonance and false data via a 20.4 kHz audio signal, aka a MEMS ultrasound attack...

CVE-2018-20823

The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service resonance and false data via a 20.4 kHz audio signal, aka a MEMS ultrasound attack...

CVE-2018-20823

The CVE-2018-20823 issue affects the gyroscope on Xiaomi Mi 5s devices, where a 20.4 kHz MEMS ultrasonic signal can cause resonance, producing false data and a denial-of-service condition. This vulnerability is documented across multiple sources (NVD, Red Hat, CVE listings, PT-Security, etc.), id...

PT-2019-10262 · Xiaomi · Xiaomi Mi 5S

Name of the Vulnerable Software and Affected Versions: Xiaomi Mi 5s affected versions not specified Description: The issue concerns the gyroscope on Xiaomi Mi 5s devices, which can be exploited by attackers to cause a denial of service. This can be achieved by using a 20.4 kHz audio signal, also...

Spoofing

A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g aka the MIUI native browser and Mint Browser 1.5.3 due to the way they handle the "q" query parameter. The portion of an https URL before the ?q= substring is not shown to the user...

CVE-2019-10875

A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g aka the MIUI native browser and Mint Browser 1.5.3 due to the way they handle the "q" query parameter. The portion of an https URL before the ?q= substring is not shown to the user...

CVE-2019-10875

A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g aka the MIUI native browser and Mint Browser 1.5.3 due to the way they handle the "q" query parameter. The portion of an https URL before the ?q= substring is not shown to the user...

CVE-2019-10875

CVE-2019-10875 is a URL-spoofing vulnerability in Xiaomi Mi Browser (international) 10.5.6-g and Mint Browser 1.5.3 caused by how the q parameter is handled: the portion of the https URL before ?q= is not displayed, enabling spoofing of the address bar. Several public sources document a PoC and p...

CVE-2019-10875

A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g aka the MIUI native browser and Mint Browser 1.5.3 due to the way they handle the "q" query parameter. The portion of an https URL before the ?q= substring is not shown to the user...

Unpatched Flaw in Xiaomi's Built-in Browser App Lets Hackers Spoof URLs

EXCLUSIVE — Beware, if you are using a Xiaomi's Mi or Redmi smartphone, you should immediately update its built-in MI browser or the Mint browser available on Google Play Store for non-Xiaomi Android devices. That's because both web browser apps created by Xiaomi are vulnerable to a critical...