107 matches found
huawei-p10-cve-2017-8890-unlock
Huawei P10 CVE-2017-8890 引导加载程序解锁研究 本仓库记录了一项经设备所有者授权的研究项目,该项目将 CVE-2017-8890 移植到一款华为 P10 固件上,将内核 use-after-free 转化为任意内核读写与临时 root 权限,重建了华为的 NVE 日志,通过合法的 NVE 驱动程序安装了一个替代的引导加载程序凭据,并验证了 fastboot 接受了所选定的明文代码。 测试目标为: Huawei P10 VTR-L29,C432 地区版本 固件 VTR-L29C432B151 Android 7.0 / EMUI 5.1 内核...
Exploit for Double Free in Linux Linux_Kernel
Huawei P10 CVE-2017-8890 bootloader-unlock research This repo...
Incorrect Authorization
Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization via the authorization process. An attacker can bypass security measures and gain unauthorized read access by leveraging high privileges without...
Incorrect Authorization
Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization in the authorization process. An attacker can gain unauthorized write access by bypassing security measures. Remediation Upgrade...
Incorrect Authorization
Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization via the authorization process. An attacker can gain unauthorized write access by bypassing security measures. Remediation Upgrade...
CVE-2018-25296 P10 Central Management Software 1.4.13 Denial of Service
P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 2000-byte payload into the password field and click login to trigger an...
Ambient P10 Central Management Software 安全漏洞
Ambient P10 Central Management Software is a management software developed by the American company Ambient, designed for centralized management and monitoring of the operating status of devices and systems. Version 1.4.13 of Ambient P10 Central Management Software contains a security vulnerabilit...
EUVD-2020-12698
Malware in sbrugna...
EUVD-2017-11868
Malware in sbrugna...
EUVD-2017-11869
Malware in sbrugna...
EUVD-2017-17108
Malware in sbrugna...
EUVD-2017-17103
Malware in sbrugna...
EUVD-2019-6368
Malware in sbrugna...
EUVD-2017-17111
Malware in sbrugna...
GHSA-8HCX-XVWW-6C6H Magento Security feature bypass
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access...
CVE-2025-27207
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized re...
Adobe Commerce 访问控制错误漏洞
Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe USA. An access control error vulnerability exists in Adobe Commerce that stems from an improper access control issue that could result in elevation of privilege. The following versions are affected:...
CVE-2019-15367
The Haier P10 Android device with a build fingerprint of Haier/P10/P10:8.1.0/O11019/1532662449:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system property...
PT-2025-6370 · Adobe · Commerce
Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-beta1 through 2.4.7-p3 Adobe Commerce versions 2.4.6-p8 Adobe Commerce versions 2.4.5-p10 Adobe Commerce versions 2.4.4-p11 and earlier Description: The issue is related to an Improper Access Control vulnerabilit...
PT-2025-6362 · Adobe · Commerce
Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker...