Input validation

The Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q/1513597833:user/release-keys contains a pre-installed platform app with a package name of com.dropboxchmod versionCode=1, versionName=1.0 that contains an exported service named...

CVE-2018-14996

The Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q/1513597833:user/release-keys contains a pre-installed platform app with a package name of com.dropboxchmod versionCode=1, versionName=1.0 that contains an exported service named...

CVE-2018-14996

CVE-2018-14996 affects the Oppo F5 on OPPO/CPH1723 running Android 7.1.1, where a pre-installed platform app with package name com.dropboxchmod exposes an exported service DropboxChmodService . This service allows a co-located app with zero permissions to supply arbitrary commands to be executed ...

community.oppo.com XSS vulnerability

Vulnerable URL: http://community.oppo.com/id/forum.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

account.community.oppo.com XSS vulnerability

Vulnerable URL: http://account.community.oppo.com/User/activeEmail/code/407873f1ba859254ab4de12a48c2481e59077fcc6782b/back/Ij48c2NyaXB0PmFsZXJ0KCJPUEVOQlVHQk9VTlRZIik8L3NjcmlwdD4= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...

Beware! Pre-Installed Android Malware Found On 36 High-end Smartphones

Bought a brand new Android Smartphone? Do not expect it to be a clean slate. At least 36 high-end smartphone models belonging to popular manufacturing companies such as Samsung, LG, Xiaomi, Asus, Nexus, Oppo, and Lenovo, which are being distributed by two unidentified companies have been found...

oppo.com XSS vulnerability

Vulnerable URL: http://www.oppo.com/my/supports/imei-check/checkimei.php?ino=%22%3E%3Csvg/onload=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 31.08.2016 Latest check for patch:| 31.08.2016 22:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

OPPO sub-nginx parses can be scored permissions-bug warning-the black bar safety net

Brief description: OPPO sub-Station, nginx parses are scored permissions. The vulnerability risk is very large,it is easy to behackersthe use of Gift OK I can only say that this is really the idea. Detailed description: Upload address:...