CVE-2024-10195

The CVE-2024-10195 entry concerns Tecno 4G Portable WiFi TR118 (V008-20220830). A vulnerability exists in the SMS Check module via the endpoint /goform/goform_get_cmd_process where manipulation of the order_by argument enables SQL injection. Exploitation is described as remote. Several sources co...

TECNO TR118 SQL注入漏洞

The TECNO TR118 is a portable 4G WiFi from China's Transocean TECNO. A SQL injection vulnerability exists in TECNO TR118 version V008-20220830, which stems from the fact that incorrect operation of the parameter orderby can lead to sql injection...

CVE-2024-10195: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /goform/goformgetcmdprocess of the component SMS Check. The manipulation of the argument orderby leads to sql injection...

PT-2024-16108 · Tecno · Tecno 4G Portable Wifi Tr118

Name of the Vulnerable Software and Affected Versions: Tecno 4G Portable WiFi TR118 version V008-20220830 Description: A critical issue affects an unknown functionality of the file /goform/goform get cmd process of the component SMS Check. The manipulation of the order by argument leads to SQL...

TECNO com.transsion.aivoiceassistant 安全漏洞

TECNO com.transsion.aivoiceassistant is a mobile application from TECNO China. A security vulnerability exists in TECNO com.transsion.aivoiceassistant that stems from the presence of improperly controlled permissions, which can lead to the launch of any unexported component...

TECNO com.afmobi.boomplayer 安全漏洞

TECNO com.afmobi.boomplayer is a mobile application from TECNO China. A security vulnerability exists in TECNO com.afmobi.boomplayer, which stems from a misconfiguration of permissions, leading to account takeover...

TECNO com.transsion.carlcare 安全漏洞

TECNO com.transsion.carlcare is a mobile application from TECNO China. A security vulnerability exists in TECNO com.transsion.carlcare. An attacker can exploit the vulnerability to obtain sensitive information...

Tecno Mobile Applications Security Vulnerability

Tecno Mobile Applications is a simple application from Tecno Mobile, a Chinese company. A security vulnerability exists in Tecno Mobile Applications that stems from improperly set permissions...

TECNO com.transsion.videocallenhancer 安全漏洞

TECNO com.transsion.videocallenhancer is a cell phone component from TECNO China. A security vulnerability exists in TECNO com.transsion.videocallenhancer version 1.1.9.973, which originates from improper control of interface privileges, resulting in a risk of private file disclosure...

TECNO HiOS 安全漏洞

TECNO HiOS is a customized user interface for Android-based operating systems from TECNO. A security vulnerability exists in TECNO HiOS version 13.0.0, which originates from the system application com.transsion.kolun.aiservice component not performing authentication checks...

CVE-2023-52275

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension...

CVE-2023-52275

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension...

Design/Logic Flaw

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension...

Tecno Camon Security Breach

The Tecno Camon is a Camon series smartphone from China-based Transocean. A security vulnerability exists in Tecno Camon X CA7 Gallery3d, which originates from a vulnerability that allows attackers to bypass the Gallary3D hidden image feature in TECNO Camon X. The vulnerability is caused due to t...

CVE-2023-52275

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension...

CVE-2023-52275

CVE-2023-52275 concerns Gallery3d on Tecno Camon X CA7 devices. The vulnerability enables attackers to view hidden images by navigating to the directory data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension. Public descriptions consistently identify ...

CVE-2023-52275: Missing Authorization

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension...

PT-2023-31953 · Gallery3D · Gallery 3

Name of the Vulnerable Software and Affected Versions: Gallery3d on Tecno Camon X CA7 devices affected versions not specified Description: The issue allows attackers to view hidden images by navigating to the data/com.android.gallery3d/.privatealbum/.encryptfiles directory and guessing the correc...

CVE-2023-6304

A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been declared as critical. This vulnerability affects unknown code of the file /goform/goformgetcmdprocess of the component Ping Tool. The manipulation of the argument url leads to os...

CVE-2023-6304

A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been declared as critical. This vulnerability affects unknown code of the file /goform/goformgetcmdprocess of the component Ping Tool. The manipulation of the argument url leads to os...