CVE-2020-7958

An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to contain functionality that allows a privileged user root in the Rich Execution Environment REE to obtain bitmap images from the fingerprint sensor because of Leftover Debug Code. The issue is that the...

EUVD-2017-14655

Malware in sbrugna...

EUVD-2017-15017

Malware in sbrugna...

EUVD-2017-14721

Malware in sbrugna...

EUVD-2020-5869

Malware in sbrugna...

EUVD-2017-14719

Malware in sbrugna...

EUVD-2017-17793

Malware in sbrugna...

EUVD-2017-17792

Malware in sbrugna...

EUVD-2017-14720

Malware in sbrugna...

EUVD-2017-14722

Malware in sbrugna...

EUVD-2017-15018

Malware in sbrugna...

EUVD-2016-1552

Malware in sbrugna...

EUVD-2017-2742

Malware in sbrugna...

EUVD-2020-28878

Malware in sbrugna...

EUVD-2017-14723

Malware in sbrugna...

EUVD-2023-30130

Malicious code in bioql PyPI...

ThreatsDay Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

Welcome to this week's Threatsday Bulletin —your Thursday check-in on the latest twists and turns in cybersecurity and hacking. The digital threat landscape never stands still. One week it's a critical zero-day, the next it's a wave of phishing lures or a state-backed disinformation push. Each...

CVE-2025-10184: OnePlus OxygenOS Telephony provider permission bypass (FIXED as of October 11, 2025)

Overview Rapid7 has identified a permission bypass vulnerability in multiple versions of OnePlus OxygenOS installed on its Android smartphones, across multiple devices. It is expected that a wider range of devices than those tested are affected. When leveraged, the vulnerability allows any...

OnePlus OxygenOS 安全漏洞

OnePlus OxygenOS is a smartphone operating system from Chinese company OnePlus. A security vulnerability exists in OnePlus OxygenOS, which stems from a lack of write access to multiple content providers and SQL injection in the update method of these providers, which could lead to the disclosure ...

CVE-2023-26309

A remote code execution vulnerability in the webview component of OnePlus Store app...