CVE-2019-10875

CVE-2019-10875 is a URL-spoofing vulnerability in Xiaomi Mi Browser (international) 10.5.6-g and Mint Browser 1.5.3 caused by how the q parameter is handled: the portion of the https URL before ?q= is not displayed, enabling spoofing of the address bar. Several public sources document a PoC and p...

Millet user Be careful a system vulnerability has been hacker caught-vulnerability warning-the black bar safety net

You use the Xiaomi mobile phone? You the MIUI system is a 7. 2 The stable version before the system? If Yes, then congratulations you won the lottery. Your phone will likely be hack via a remote code execution vulnerability in the control. ! Millet user Be careful a system vulnerability has been...

Warning: Millions of Xiaomi Phones Vulnerable to Remote Hacking

Millions of Xiaomi smartphones are vulnerable to a dangerous remote code execution RCE vulnerability that could grant attackers complete control of handsets. The vulnerability, now patched, exists in MIUI – Xiaomi's own implementation of the Android operating system – in versions prior to MIUI...

miui-hd2.net-fx2.de XSS vulnerability

Vulnerable URL: http://miui-hd2.net-fx2.de/wp-content/plugins/js-multihotel/includes/refreshDate.php?roomid=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability...

xiaomi-miui.gr XSS vulnerability

Vulnerable URL: https://xiaomi-miui.gr/community/wcf/js/3rdParty/mejs/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18328...

MIUI Dark Digital Weather CL. - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application MIUI Dark Digital Weather CL. published at the 'play' market has multiple vulnerabilities...

MIUI Digital Weather Clock - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application MIUI Digital Weather Clock published at the 'play' market has multiple vulnerabilities...

Android / MIUI multiple security vulnerabilities

Browser CSP restrictions bypass is possible, DoS via NFC, Keystore buffer overflow...

MIUI Torch Open Vulnerability

MIUI Torch Open Vulnerability I. Summary com.android.systemui is the corresponding package of MiuiSystemUI.apk, a MIUI system application that manages user interface and other functions. When started by NFC tag, the torch in NFC mobile phone will be open automatically...

MIUI Wifi Connection Message Vulnerability

MIUI Wifi Connection Message Vulnerability I. Summary Wifi Connection Message is written to a NFC tag, which can be touched by a NFC mobile phone for connecting wireless AP automatically. A logic flaw has been found in MIUI that is a Android ROM. The flaw can be used to turn on wifi, with the hel...

Android Bluetooth Pairing Packet Processing Vulnerability（by wangzq from NCNIPC）

I. Summary Bluetooth Pairing Packet is written to a NFC tag, which can be touched by a NFC mobile phone for bluetooth pairing. A logic flaw has been found in some versions of Andorid mobile phone. The flaw can cause NFC phones'bluetooth turned on, regardless of whether the pairing succeeds or not...

Millet mobile phone MIUI remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

Author: song Shen lei Reproduced please indicate the source http://blogs.360.cn/360mobile/2014/08/25/miui-rce-vul/ 7 on I in the study of the webview vulnerability when the specially picked millet phone MIUI tested,found a very obvious security vulnerability. Through the vulnerability can remotel...

MIUI-V5 pattern lock/shortcut key switch design flaw could lead to bypass-vulnerability warning-the black bar safety net

Brief description: Today the third to grab the Red rice, or did not grab, depressed and... It seems 9 months of the millet 3 is simply grab the rhythm of Ah, find F-Code, Xiaomi 3 or red rice can be. Don't know why, before submitting a no show.,,, a Detailed description: 1 require F Code. 2 is in...

Alipay mobile client to skip the gesture password authentication method-vulnerability warning-the black bar safety net

PayPal this vulnerability can jump directly to the customer end of the gesture password validation, operation, ZTE U950, the MIUI V5 test feasible This is a gesture password Alipay client ! 1. First of all install and open ES file Explorer, just select a unrecognized type of file, such as here...