Aristide Fattori

8 exploits Active since Apr 2017
CVE-2015-8780 WRITEUP MEDIUM WORKING POC
Samsung Kies < 2015-10-30 - Path Traversal via Kies Restore
Samsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury.
CVSS 6.4
CVE-2016-2036 WRITEUP MEDIUM WRITEUP
Samsung kernel - Null Pointer Dereference
The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to trigger a NULL pointer dereference via a "GET HTTP/1.1" request, aka SVE-2016-5036.
CVSS 5.5
CVE-2016-2565 WRITEUP LOW WRITEUP
Samsung Galaxy S6 Firmware - Unauthorized Sent Email Exposure via SecEmailSync
Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to read sent e-mail messages, aka SVE-2015-5081.
CVSS 3.3
CVE-2016-2566 WRITEUP CRITICAL WRITEUP
Samsung Galaxy S6 Firmware - SQL Injection in SecEmailSync
Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081.
CVSS 9.8
CVE-2016-2567 WRITEUP LOW WRITEUP
Samsung Galaxy S6 and Note 3 Firmware - URL Filter Bypass via Query String Exceptional URL
secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering by inserting an "exceptional URL" in the query string, as demonstrated by the http://should-have-been-filtered.example.com/?http://google.com URL.
CVSS 3.3
CVE-2016-4030 WRITEUP MEDIUM WRITEUP
Samsung Galaxy S6, Note 3, S4 mini, S4 mini LTE, S4 - Unauthenticated Modem Access via USB Configuration
Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301.
CVSS 6.8
CVE-2016-4031 WRITEUP MEDIUM WRITEUP
Samsung Devices - Command Injection
Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices allow attackers to send AT commands by plugging the device into a Linux host, aka SVE-2016-5301.
CVSS 6.8
CVE-2016-4032 WRITEUP MEDIUM WRITEUP
Samsung Galaxy S6, Note 3, S4 mini, S4 mini LTE, S4 - Improper Access Control via AT Command Injection
Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301.
CVSS 4.6