Denial of Service Vulnerability in Multiple Huawei Phones

Huawei Mate 8 and others are smartphone products of the Chinese company Huawei Huawei. A denial of service vulnerability exists in several Huawei phones due to mishandling of malicious parameters. An attacker launches an attack by inducing a user to install a malicious APK and pre-install an...

The vulnerability of FTP servers of microprogrammed software-controlled Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200 allows a intruder to gain access to the devices.

The vulnerability of FTP servers of microprogrammed logic controllers from Schneider Electric—Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200—is related to the use of pre-installed credentials. Exploiting this vulnerability can allow a malicious actor to gain access to the...

CVE-2017-17226

The TripAdvisor app with the versions before TAMobileApp-24.6.4 pre-installed in some Huawei mobile phones have an arbitrary URL loading vulnerability due to insufficient input validation and improper configuration. An attacker may exploit this vulnerability to invoke TripAdvisor to load a specif...

The software-hardware device’s vulnerability regarding user authentication based on fingerprint recognition in Lenovo Fingerprint Manager Pro allows a intruder to gain access to users’ account information due to the use of a pre-installed account and the flaws in the encryption algorithm.

The vulnerability of the software-hardware solution for implementing user authentication based on fingerprint recognition in Lenovo Fingerprint Manager Pro is related to the use of a pre-installed account and deficiencies in the encryption algorithm. Exploiting this vulnerability can allow an...

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I, due to lack of access control mechanisms, allows intruders to gain access to the device or cause malfunctions during maintenance.

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to alter the device’s settings by directly accessing the...

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I lies in the rigid encoding of registration data, which allows a intruder to gain access to the device with administrator rights.

The vulnerability of the ACTi series D, B, E, and I video surveillance camera microprogramming systems is related to the use of a pre-installed administrator account. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device with administrator privileges...

The vulnerability of the microprogrammed software of the MitraStar GPT-2541GNAC and MitraStar DSL-100HN-T1 lies in the use of a pre-installed account, allowing a perpetrator to gain access to the device.

The vulnerability of the microprogrammed routing devices MitraStar GPT-2541GNAC and MitraStar DSL-100HN-T1 is related to the use of a pre-installed account “zyad1234” with the password “zyad1234”. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the devic...

Mobile Menace Monday: upping the ante on Adups

Adups is back on our radar. The same China-based company caught collecting an abundance of user data and creating a backdoor on mobile devices in 2016 has another malicious card to throw down. This time, it's an auto installer we detect as Android/PUP.Riskware.Autoins.Fota. We thought they cleane...

The vulnerability of D-Link DWR-932B router’s microprogramming software lies in the use of pre-installed accounts, allowing a hacker to gain access to the device with root privileges.

The vulnerability of the D-Link DWR-932B router’s microprogramming software lies in the use of pre-set accounts “admin” and “root”, with passwords “admin” and “1234” respectively. Exploiting this vulnerability allows a malicious actor to gain access to the device with root privileges via Telnet o...

The vulnerability of ExaGrid backup device’s microprogramming software, related to the use of pre-installed credentials, allows a perpetrator to gain access to devices with root privileges.

The vulnerability of ExaGrid backup device software relates to the use of pre-installed credentials. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to the device with root privileges, using the pre-installed password “inflection” for the “root” account...

The vulnerability of the microprogrammed software of the Philips In.Sight B120/37 wireless video camera lies in the presence of pre-installed accounts, which allow a intruder to gain access to the device.

The vulnerability of the microprogrammed software of the Philips In.Sight B120/37 wireless video camera is related to the presence of preset user accounts for access via Telnet or UART accounts like “root”, “admin”, and “mg3500” with passwords “b120root”, “/ADMIN/”, and “merlin” respectively as...

The vulnerability of the microprogrammed software of the wireless video camera Gynoii, related to the presence of pre-installed accounts, allows a intruder to gain access to the device.

The vulnerability of the microprogrammed wireless video camera Gynoii relates to the presence of pre-installed user accounts “guest” and “admin”, with passwords “guest” and “12345” respectively. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the...

The vulnerability of the Altum router’s microprogramming software relates to the use of pre-installed user accounts, which allow attackers to gain access to the embedded operating system with administrator privileges.

The vulnerability of the Altum router microprogramming system is related to the use of a pre-installed root account. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to the embedded operating system with administrator privileges using SSH or Telnet connections...

Another preinstalled app found on OnePlus that could collect user data

By Waqas A couple of days ago it was reported that an This is a post from HackRead.com Read the original post: Another preinstalled app found on OnePlus that could collect user data...

The vulnerability of the Oracle Identity Manager (OIM), a software platform of Oracle Fusion Middleware, allows a perpetrator to gain full control over the system.

The vulnerability of the Oracle Identity Manager OIM, a software platform of Oracle Fusion Middleware, is related to the use of pre-installed system accounts. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the Oracle Identity Manager using the...

PT-2017-3193 · Korenix · Jetnet5628G-R +7

Name of the Vulnerable Software and Affected Versions: Korenix JetNet JetNet5018G version 1.4 Korenix JetNet JetNet5310G version 1.4a Korenix JetNet JetNet5428G-2G-2FX version 1.4 Korenix JetNet JetNet5628G-R version 1.4 Korenix JetNet JetNet5628G version 1.4 Korenix JetNet JetNet5728G-24P versio...

The vulnerability of the Task Manager service of the AmosConnect email delivery management system allows a perpetrator to execute arbitrary commands on the operating system’s host platform.

The vulnerability of the AmosConnect email delivery system management service is related to the use of immutable, pre-installed system accounts. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full administrative privileges and execute arbitrary commands on the...

Mozilla Firefox Privilege Access Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox has a security vulnerability, an attacker can use the API key glocation in the broadcast protection through the pre-installed application to define the same permissions can be...

The vulnerability of the D-Link DSR-500 router’s microprogramming software allows a malicious individual to gain administrator privileges.

The D-Link DSR-500 router has a pre-installed user with administrator privileges...

Dell Shipping Superfish-Style Root Cert, Private Key

Update Just in time for Black Friday, various models of new Dell computers are shipping with a preinstalled root certificate and private key that corresponds to the cert, which as of earlier today was being accepted by all major browsers except Firefox. Given that a number of tools exist to aid i...