CVE-2022-24864 Malicious Javascript injection in OriginProtocol/origin-website

Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to /presale/join. User-controlled data is passed with no sanitization to SendGrid and injected into an email that is delivered to the...

Authentication flaw

The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the origin website and bypass the website whitelist protection mechanism via a crafted package...

PT-2014-8842

Name of the Vulnerable Software and Affected Versions Huawei P7-L10 smartphones versions prior to V100R001C00B136 Description The issue concerns the PackageInstaller module, which can be exploited by remote attackers to spoof the origin website. This allows bypassing the website whitelist...