Huawei P30, Mate 20 and P30 Pro Buffer Overflow Vulnerability

The Huawei P30, among others, is a smartphone from the Chinese company Huawei Huawei. A buffer overflow vulnerability exists in versions prior to Huawei P30 ELLE-AL00B 9.1.0.193 C00E190R1P21, Mate 20 Hima-AL00B 9.1.0.135 C00E200R2P1 and P30 Pro VOGUE-AL00A 9.1.0.193 A buffer overflow vulnerabilit...

CVE-2019-5215

There is a man-in-the-middle MITM vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, and P30 Pro versions before VOG-AL00 9.1.0.162 C01E160R1P12/C01E160R2P1. When users establish connection and transfer data through Huawei Share, an attacker could...

Design/Logic Flaw

Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1 and P30 Pro versions before VOG-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, are exposed to a message replay vulnerability. For the sake of better compatibility, these devices implement a less strict check on th...

Design/Logic Flaw

There is a man-in-the-middle MITM vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, and P30 Pro versions before VOG-AL00 9.1.0.162 C01E160R1P12/C01E160R2P1. When users establish connection and transfer data through Huawei Share, an attacker could...

CVE-2019-5307

The CVE-2019-5307 entry covers a message replay vulnerability in Huawei 4G LTE devices (P30 before ELE-AL00 9.1.0.162; P30 Pro before VOG-AL00 9.1.0.162) caused by a lax NAS COUNT check. An attacker can exploit a rogue base station to replay the GUTI reallocation command (and in some cases the Id...

CVE-2019-5215

There is a man-in-the-middle MITM vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, and P30 Pro versions before VOG-AL00 9.1.0.162 C01E160R1P12/C01E160R2P1. When users establish connection and transfer data through Huawei Share, an attacker could...

CVE-2019-5215

Summary: CVE-2019-5215 is a MITM vulnerability affecting Huawei Share on Huawei P30/P30 Pro devices (specific builds: ELE-AL00/VOG-AL00 with reported 9.1.0.162 variants). The issue allows an attacker who can observe adjacent-network traffic to sniff, spoof, and tamper Huawei Share data during con...

Vastal I-Tech SQL Injection Vulnerability

No description provided by source. IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:viewgroup.php?groupid= Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

Vastal I-Tech - SQL Injection

IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:"viewgroup.php?groupid=" Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

Vastal I-Tech - SQL Injection

Vastal I-Tech - SQL Injection IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:"viewgroup.php?groupid=" Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...