CVE-2017-8178

Huawei Email APP on Vicky-AL00 smartphones is affected by a stored XSS vulnerability in versions earlier than VKY-AL00C00B171. A remote attacker could send an email containing malicious script and trigger execution when a user opens the email. The issue arises from insufficient verification of pa...

CVE-2017-8173

CVE-2017-8173 corresponds to a FRP (Factory Reset Protection) bypass vulnerability affecting Huawei smartphones (models Maya-L02, VKY-L09, Vicky-AL00A, Victoria-AL00A, Warsaw-AL00) with firmware versions older than the specified builds (Maya-L02C636B126, VKY-L29C10B151, VTR-L29C10B151, Vicky-AL00...

CVE-2017-8171

Huawei smart phones with software earlier than Vicky-AL00AC00B172D versions have a Factory Reset Protection FRP bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform some...

CVE-2017-8171

Huawei CVE-2017-8171 affects certain Huawei smartphones with firmware earlier than Vicky-AL00AC00B172D. A FRP bypass vulnerability exists where, during FRP reconfiguration, an attacker can enter TalkBack mode to bypass Google account verification. Impact is bypass of FRP protection (no data exfil...

CVE-2017-8178

Huawei Email APP Vicky-AL00 smartphones with software of earlier than VKY-AL00C00B171 versions has a stored cross-site scripting vulnerability. A remote attacker could exploit this vulnerability to send email that storing malicious code to a smartphone and waiting for a user to access this email...

Huawei Vicky-AL00 FRP Bypass Vulnerability

The Huawei Vicky-AL00 is a smartphone product from the Chinese company Huawei Huawei. A security vulnerability exists in versions prior to Huawei Vicky-AL00 Vicky-AL00AC00B172D. During the process of entering FRP to reset the phone, an attacker can exploit the vulnerability to enter Talkback mode...

vicky.co.jp XSS vulnerability

Vulnerable URL: http://vicky.co.jp/blog.php?brand="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7162850 VIP website status:| No Check vicky.co.jp SSL connection:| Grade: A-...

FRP bypass vulnerability in multiple Huawei phones

Maya-L02, VKY-L09, Vicky-AL00A, Warsaw-AL00 are all smartphones from Huawei Huawei. Several Huawei phones are vulnerable to FRP bypass vulnerability. The attacker can bypass the FRP function by entering the configuration process through a secret code during the FRP reset of the phone and performi...

Huawei Vicky-AL00A and Victoria-AL00A cell phones isub denial of service vulnerability

The Huawei Vicky-AL00A and Victoria-AL00A are both smartphone devices from the Chinese company Huawei Huawei. A denial of service vulnerability exists in the lsub service in the Huawei Vicky-AL00A Vicky-AL00AC00B157 prior and Victoria-VL00A Victoria-VL00AC00B157 prior, which stems from a program...

sweet-vicky.com XSS vulnerability

Vulnerable URL: http://www.sweet-vicky.com/tour2016/index.php?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1980886 VIP website status:| No Chec...

Multiple Buffer Overflow Vulnerabilities in Huawei Mobile's Bastet Component (CNVD-2017-04678)

Huawei Vicky-AL00A/Victoria-AL00A is a smartphone from Huawei. A buffer overflow vulnerability exists in the Bastet of the Huawei Vicky-AL00A/Victoria-AL00A phones due to a lack of parameter checking. An attacker who has gained root access to the Android system can trick the user into installing ...