CVE-2019-15423

The Bluboo BlubooS1 Android device with a build fingerprint of BLUBOO/BlubooS1/BlubooS1:7.0/NRD90M/1495809471:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via...

CVE-2019-15423

CVE-2019-15423 affects the Bluboo Bluboo_S1 on Android 7.0 where a pre-installed app (package com.mediatek.factorymode) allows unauthorized wireless settings modification via a confused deputy attack. The vulnerability is exploitable by any co-located app with local access, enabling partial integ...

CVE-2019-15422

The Doogee Mix Android device with a build fingerprint of DOOGEE/MIX/MIX:7.0/NRD90M/1495809471:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a confused...

CVE-2019-15422

The CVE concerns the Doogee Mix Android device (DOOGEE/MIX/MIX:7.0/NRD90M/1495809471:user/release-keys) which ships a pre-installed app with package name com.mediatek.factorymode (versionCode=1, versionName=1). The vulnerability allows unauthorized wireless settings modification via a confused de...

CVE-2019-15421

The Blackview BV7000Pro Android device with a build fingerprint of Blackview/BV7000Pro/BV7000Pro:7.0/NRD90M/1493011204:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings...

CVE-2019-15421

CVE-2019-15421 affects the Blackview BV7000_Pro device (build Blackview/BV7000_Pro/BV7000_Pro:7.0/NRD90M/1493011204) due to a pre-installed, co-located app named com.mediatek.factorymode (versionCode=1, versionName=1). The vulnerability allows unauthorized wireless settings modification via a con...

CVE-2019-15420

The Blackview BV9000Pro-F Android device with a build fingerprint of Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/1514363110:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings...

CVE-2019-15420

CVE-2019-15420 affects Blackview BV9000Pro-F (Android 7.1.1, build Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/1514363110:user/release-keys). A pre-installed app com.mediatek.factorymode (version 1) enables unauthorized wireless settings modification via a confused deputy attack, accessible to...

CVE-2019-15415

The Xiaomi Redmi 5 Android device with a build fingerprint of xiaomi/vince/vince:7.1.2/N2G47H/V9.5.4.0.NEGMIFA:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app versionCode=1, versionName=QL1711201803291645 that allows unauthorized wireless settings...

CVE-2019-15394

The Asus ZenFone 5 Selfie Android device with a build fingerprint of asus/WWPhone/ASUSX017D1:7.1.1/NMF26F/14.0400.1810.061-20181107:user/release-keys contains a pre-installed app with a package name of com.asus.atd.smmitest app versionCode=1, versionName=1 that allows unauthorized wireless settin...

CVE-2019-15394

CVE-2019-15394 concerns the Asus ZenFone 5 Selfie (ASUS_X017D_1, Android 7.1.1). A pre-installed app with package name com.asus.atd.smmitest (versionCode 1, versionName 1) enables unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app ...

CVE-2019-15393

The Asus ZenFone Live Android device with a build fingerprint of asus/WWPhone/ASUSX00LD3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.atd.smmitest app versionCode=1, versionName=1 that allows unauthorized wireless settings...

CVE-2019-15393

The CVE-2019-15393 entry concerns Asus ZenFone Live devices where a pre-installed app (com.asus.atd.smmitest, versionCode=1, versionName=1) permits unauthorized wireless settings modification via a confused-deputy attack. The flaw is triggered by any app co-located on the device and represents a ...

CVE-2019-15744

The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyakisoftbank/keyakisoftbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys contains a pre-installed app with a package name of jp.softbank.mb.tdrl app versionCode=1413005, versionName=1.3.0 that allows unauthoriz...

CVE-2019-15744

CVE-2019-15744 concerns a Sony Xperia XZs running Android 7.1.1 with build fingerprint Sony/keyaki_softbank/keyaki_softbank. A pre-installed app (package: jp.softbank.mb.tdrl, versionCode 1413005, versionName 1.3.0) on the device allows unauthorized wireless settings modification through a confus...

CVE-2019-8392

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to enable Guest Wi-Fi via the SetWLanRadioSettings HNAP API to the web service provided by /bin/goahead...

TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Information Disclosure)

TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery Information Disclosure Exploit Title: TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery Information Disclosure Date: 2018-08-09 Exploit Author: Wadeek Vendor Homepage: https://www.tp-link.com/ Hardware Version: Archer C50 v3...

TP-Link C50 Wireless Router 3 Information Disclosure Cross Site Request Forgery

Exploit Title: TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery Information Disclosure Date: 2018-08-09 Exploit Author: Wadeek Vendor Homepage: https://www.tp-link.com/ Hardware Version: Archer C50 v3 00000001 Firmware Link: https://www.tp-link.com/download/Archer-C50V3.htmlFirmware...

TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Information Disclosure)

Exploit Title: TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery Information Disclosure Date: 2018-08-09 Exploit Author: Wadeek Vendor Homepage: https://www.tp-link.com/ Hardware Version: Archer C50 v3 00000001 Firmware Link: https://www.tp-link.com/download/Archer-C50V3.htmlFirmware...

D-Link DIR601 2.02 Credential Disclosure

Exploit title: D-Link DIR601 2.02NA - Credential disclosure Date: 2018-07-10 Exploit Author: Richard Rogerson Vendor Homepage: http://ca.dlink.com/ Software Link: http://support.dlink.ca/ProductInfo.aspx?m=DIR-601 Version: = 2.02NA Tested on: D-Link DIR601 Firmware 2.02NA Contact:...