漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with a package name of com.adups.fota.sysoper allows any app on the device to read, write, and delete files as the system user. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute to a value of android.uid.system which makes it execute as the system user, which is a very privileged user on the device. This allows a third-party app to read, write, and delete the user's sent and received text messages and call log. This allows a third-party app to obtain PII from the user without permission to do so.
漏洞信息
N/A
漏洞
N/A
漏洞
BLU R1 HD Adups Fota 加密问题漏洞
漏洞信息
BLU R1 HD是美国BLU公司的一款智能手机。Adups Fota是其中的一款中国广升(Adups)公司的用于移动设备的基于云的系统升级推送软件。 BLU R1 HD设备存在安全漏洞。攻击者可利用该漏洞读取,编写和删除用户发送和接收的短信及通话记录,并获取用户PII。
漏洞信息
N/A
漏洞
N/A