CVE-2022-20137

In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi settings due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Produc...

CVE-2022-24610

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...

Default credentials

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...

CVE-2022-24610: Insufficiently Protected Credentials

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...

CVE-2019-19515

Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings...

CVE-2019-19515

Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings...

Cross site scripting

Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings...

CVE-2019-19515

Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings...

CVE-2019-19515

CVE-2019-19515 concerns Ayision Ays-WR01 devices with the v28K.RPT.20161224 release, where a stored cross-site scripting (XSS) vulnerability exists in wireless settings. Connected sources describe the underlying issue as operations on memory without proper data validation, leading to improper rea...

PT-2020-10177

Name of the Vulnerable Software and Affected Versions Ayision Ays-WR01 version v28K.RPT.20161224 Description The issue allows stored XSS in wireless settings. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

CVE-2019-19515: Improper Neutralization of Input During Web Page Generation

Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings...

ASUS ZenFone 5 Selfie Access Control Error Vulnerability

The ASUS ZenFone 5 Selfie is a smartphone from Asus ASUS of Taiwan, China. An Access Control Error vulnerability exists in ASUS ZenFone 5 Selfie. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker can exploi...

GHIA CamIP 1.2 for iOS - Password Denial of Service (PoC)

GHIA CamIP 1.2 for iOS - Password Denial of Service PoC Exploit Title: GHIA CamIP 1.2 for iOS - 'Password' Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2019-11-27 Vendor Homepage: https://apps.apple.com/mx/app/ghia-camip/id1342090963 Software Link: App Store for iOS devices...

GHIA CamIP 1.2 for iOS - 'Password' Denial of Service (PoC)

Exploit Title: GHIA CamIP 1.2 for iOS - 'Password' Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2019-11-27 Vendor Homepage: https://apps.apple.com/mx/app/ghia-camip/id1342090963 Software Link: App Store for iOS devices Tested Version: 1.2 Vulnerability Type: Denial of Servic...

Unspecified Vulnerability in Kata M4s

Kata M4s is a smartphone. The com.mediatek.factorymode app in the Kata M4s build fingerprint: alps/fullhct675066n/hct675066n:7.0/NRD90M/1495624556:user/test-keys has a security vulnerability. An attacker could use this vulnerability to make unauthorized changes to wireless settings via other...

Unspecified Vulnerability in Bluboo Bluboo_S1

Bluboo BlubooS1 is a smartphone. The com.mediatek.factorymode app in Bluboo BlubooS1 build fingerprint: BLUBOO/BlubooS1/BlubooS1:7.0/NRD90M/1495809471:user/release-keys A security vulnerability exists. An attacker could use this vulnerability to make unauthorized changes to wireless settings via...

Unspecified Vulnerability in Blackview BV7000_Pro

The Blackview BV7000Pro is a smartphone from Blackview of Hong Kong, China. A security vulnerability exists in the Blackview BV7000Pro build fingerprint: Blackview/BV7000Pro/BV7000Pro:7.0/NRD90M/1493011204:user/release-keys in the com.mediatek. A security vulnerability exists in the factorymode...

Unspecified Vulnerability in Doogee BL5000

Doogee BL5000 is a smartphone from Doogee, a Chinese company. A security vulnerability exists in the com.mediatek.factorymode app in the Doogee BL5000 build fingerprint: DOOGEE/BL5000/BL5000:7.0/NRD90M/1497072355:user/release-keys. An attacker could use this vulnerability to make unauthorized...

Xiaomi Mi Note 2 is vulnerable

Xiaomi Mi Note 2 is a smartphone from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in the com.miui.powerkeeper app in Xiaomi Mi Note 2 build fingerprint: Xiaomi/scorpio/scorpio:6.0.1/MXB48T/7.1.5:user/release-keys. An attacker can exploit this vulnerability to make...

Xiaomi Mi Mix has an unspecified vulnerability

The Xiaomi Mi Mix is a smartphone from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in Xiaomi Mi Mix build fingerprint: Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys in Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1 A security vulnerability exists in...