two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

CVE-2026-18907 — Path Traversal in TECNO Hi Browser Download Handler Proof-of-concept for CVE-2026-18907 CVSS 7.5 High, CWE-23, a relative path-traversal vulnerability in the download file feature of TECNO Hi Browser com.talpa.hibrowser version 2.23.1.1. The browser trusted an attacker-controlled...

Exploit for CVE-2026-18907

CVE-2026-18907 — Path Traversal in TECNO Hi Browser Download H...

CVE-2026-0634

Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection...

EUVD-2026-18140

Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection...

CVE-2026-0634

Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection...

CVE-2026-0634 Code Execution in AssistFeedbackService on TECNO Pova7 Pro 5G

Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection...

CVE-2026-0634

Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection...

CVE-2026-0634

The TECNO Pova7 Pro 5G smartphone running Android is vulnerable to code execution due to a command injection flaw in the AssistFeedbackService component. This vulnerability allows local applications to execute arbitrary code with system privileges . No specific exploit details or remediation step...

CVE-2026-0634 Code Execution in AssistFeedbackService on TECNO Pova7 Pro 5G

Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection...

CVE-2026-0634: Improper Neutralization of Argument Delimiters in a Command

Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection...

TECNO Pova7 Pro 5G security vulnerabilities

The TECNO Pova7 Pro 5G is a smartphone from the Chinese company TECNO, capable of supporting 5G communication. The TECNO Pova7 Pro 5G has a security vulnerability, which stems from command injection in the AssistFeedbackService component. This vulnerability may allow local applications to execute...

PT-2026-29698

Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection...

CVE-2025-15385

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...

CVE-2025-15385

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...

CVE-2025-15385

The TECNO Mobile com.Afmobi.Boomplayer music player (version 7.4.63 ) is affected by an Insufficient Verification of Data Authenticity vulnerability. This flaw allows for an Authentication Bypass , potentially permitting unauthorized access to the application. While the technical impact is rated ...

CVE-2025-15385

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...

TECNO Mobile Boomplay security vulnerability

TECNO Mobile Boomplay is a music player from TECNO China. A security vulnerability exists in TECNO Mobile Boomplay version 7.4.63, which stems from insufficient data authenticity verification and could lead to authentication bypass...

PT-2026-1364

Name of the Vulnerable Software and Affected Versions TECNO Mobile com.Afmobi.Boomplayer version 7.4.63 Description A flaw exists in TECNO Mobile com.Afmobi.Boomplayer that allows for authentication bypass due to insufficient verification of data authenticity. Recommendations At the moment, there...

TECNO Pova6 Pro 5G security vulnerabilities

TECNO Pova6 Pro 5G is a smartphone from TECNO, a Chinese company. A security vulnerability exists in TECNO Pova6 Pro 5G, which stems from a lack of privilege control in the com.transsion.tranfacmode.entrance.main.MainActivity component, which could result in a third-party application directly...

Tecno AudioLink security vulnerability

Tecno AudioLink is an audio linking software in cell phones from the Chinese company Tecno. A security vulnerability exists in Tecno AudioLink, which stems from insufficient protection of the AudioLink component service and could allow a local attacker to overwrite system files...