EUVD-2019-6353

Malware in sbrugna...

CVE-2023-33294

An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctwebserver binary exposes a local web server that responds to GET and POST requests on port 2929. The server accepts arbitrary Bash commands and executes them as root. Because it is not permission or context restricted and returns...

CVE-2023-33294

An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctwebserver binary exposes a local web server that responds to GET and POST requests on port 2929. The server accepts arbitrary Bash commands and executes them as root. Because it is not permission or context restricted and returns...

CVE-2021-39658: Incorrect Default Permissions

ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does not check the permissions of the caller，resulting in permission leaks。Third-party apps can use this service to arbitrarily modify and set system properties。Product:...

Unspecified Vulnerability in Ulefone Armor 5

Ulefone Armor 5 is a smartphone from Chinese company Ulefone Technology Ulefone. An unspecified vulnerability exists in Ulefone Armor 5. An attacker can exploit the vulnerability to modify system properties...

Unspecified Vulnerability in Yulong Computer Communication Technology Coolpad 1851

Yulong Computer Communication Technology Coolpad 1851 is a smartphone from China's Yulong Computer Communication Technology. An unspecified vulnerability exists in the Yulong Computer Communication Technology Coolpad 1851. An attacker can exploit this vulnerability to modify system properties...

Infinix Note 5 Access Control Error Vulnerability

Infinix Note 5 is a smartphone from the Chinese company Transn Infinix. The Infinix Note 5 build fingerprint: Infinix/H633IJL/Infinix-X604sprout:8.1.0/O11019/IJL-180531V181:user/release-keys contains an access control error in the com.mediatek.wfo An access control error vulnerability exists in t...

PT-2019-14160

Name of the Vulnerable Software and Affected Versions Evercoss U50A Android device with a build fingerprint of EVERCOSS/U50A./EVERCOSS:7.0/NRD90M/1499911028:eng/test-keys Description The issue concerns a pre-installed app with a package name of com.qiku.cleaner that allows other pre-installed app...

PT-2019-14087

Name of the Vulnerable Software and Affected Versions Dexp Z250 Android device with a build fingerprint of DEXP/Z250/Z250:8.1.0/O11019/1531130719:user/release-keys com.mediatek.wfo.impl app version 8.1.0 Description The issue concerns a pre-installed app that allows any co-located app to modify a...

CVE-2017-2735

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

PT-2017-15522

Name of the Vulnerable Software and Affected Versions TIT-AL00 smartphones with software versions earlier than TIT-AL00C583B214 Description The issue concerns an exposed system interface in the software, which is used for interaction with external applications. However, the software does not...

CVE-2017-2735: Exposed Dangerous Method or Function

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...