CVE-2022-48301

The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability may restore the pre-installed apps that have been uninstalled...

PT-2023-15681 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The bundle management module lacks permission verification in some APIs. Successful exploitation of this issue may restore the pre-installed apps that...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. A security bypass vulnerability exists in Huawei HarmonyOS, which stems from an improper interface permission verification in the application package management...

CVE-2022-38396

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 o...

The vulnerability of the FortiSIEM security management system’s database allows a attacker to gain access to the device’s database.

The vulnerability of the FortiSIEM security management system is related to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the device’s database...

The vulnerability of the executable file EarthAgent.exe in the security tools of ServerProtect for Storage (SPFS), ServerProtect for EMC Celerra (SPEMC), ServerProtect for Network Appliance Filers (SPNAF), and ServerProtect for Microsoft Windows/Novell Netware (SPNT) allows a hacker to perform arbitrary actions.

The vulnerability of the EarthAgent.exe executable files in the ServerProtect for Storage SPFS, ServerProtect for EMC Celerra SPEMC, ServerProtect for Network Appliance Filers SPNAF, and ServerProtect for Microsoft Windows/Novell Netware SPNT security solutions is related to the use of...

The vulnerability of NETGEAR’s Wi-Fi router software, including models RBK352, RBR350, and RBS350, arises from the use of pre-installed credentials. This allows a hacker to trigger a service failure.

The vulnerability of NETGEAR’s Wi-Fi router software, including models RBK352, RBR350, and RBS350, lies in the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor to remotely cause service failures...

Samsung Reminder App 代码注入漏洞

Samsung Reminder App is a reminder application from Samsung South Korea that comes pre-installed on Korean branded Samsung devices. The Samsung Reminder App suffers from a security vulnerability that allows an attacker to perform privileged actions by hijacking and modifying intent...

PT-2021-7626 · Vim +4 · Vim +4

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a heap-based buffer overflow, which can be exploited to gain access to confidential data, compromise data integrity, and cause a denial of service. It is estimated that...

The vulnerability of the php component of the Synology Calendar application allows a hacker to gain unauthorized access to protected information.

The vulnerability of the php component of the Synology Calendar application is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the PPPoE configuration process of D-Link’s router software D-Link DIR-2640-US allows a hacker to alter routing information, intercept DNS requests, and perform phishing attacks.

The vulnerability of the PPPoE configuration process of D-Link DIR-2640-US router software lies in the presence of pre-installed registration data. Exploiting this vulnerability allows a malicious actor to alter routing information, intercept DNS requests, and carry out phishing attacks from a...

Gigaset Android Update Server Hacked to Install Malware on Users' Devices

Gigaset has revealed a malware infection discovered in its Android devices was the result of a compromise of a server belonging to an external update service provider. Impacting older smartphone models — GS100, GS160, GS170, GS180, GS270 plus, and GS370 plus series — the malware took the form of...

The vulnerability of the JunOS operating system’s NFX250 Series routers allows a hacker to gain full control over the system.

The vulnerability of the JunOS operating system’s NFX250 Series routers lies in the use of pre-installed registration data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full control over the system...

The vulnerability of D-Link COVR-2600R and COVR-3902 router microprogramming software, related to the use of pre-installed login credentials, allows attackers to enhance their privileges.

The vulnerability of D-Link COVR-2600R and COVR-3902 router microprogramming software is related to the use of pre-installed login credentials. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability in the web interface of the Cisco Data Center Network Manager system allows a hacker to escalate their privileges.

The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM system is related to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor to increase their privileges by using a static encryption key...

'Undeletable' Malware Shows Up in Yet Another Android Device

Security researchers have identified yet another Android-based mobile device available through the government-funded Lifeline Assistance Program pre-loaded with malware, a discovery adding evidence to the disturbing trend of smartphones infected with undeletable malicious code upon purchase. Hard...

libreoffice: Insufficient URL encoding flaw in allowed script location check

LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice...

Samsung A8+ has an unspecified vulnerability

Samsung A8+ is a smartphone from Samsung South Korea. A security vulnerability in the Samsung A8+ build fingerprint: samsung/jackpot2ltexx/jackpot2lte:8.0.0/R16NW/A730FXXS4BSC2:user/release-keys in the com.samsung.android. A security vulnerability exists in the themecenter app. An attacker could...

Unspecified Vulnerability in Evercoss U6

Evercoss U6 is a smartphone. Evercoss U6 has a security vulnerability. An attacker can exploit the vulnerability to gain signatureOrSystem privileges with a pre-installed application on the device...

Unspecified Vulnerability in Samsung A7

The Samsung A7 is a smartphone from the South Korean company Samsung Samsung. A security vulnerability in the Samsung A7 build fingerprint: samsung/a7y17ltexx/a7y17lte:8.0.0/R16NW/A720FXXU7CSC2:user/release-keys in the com.samsung.android. A security vulnerability exists in the themecenter app. A...