pentester.land· Jun 14, 2022· by Daniel Komaromy (@kutyacica), Lorant Szabo (@szabolor), Gyorgy Miru (@gymiru)

[BugTales] UnZiploc: From 0-click To Platform Compromise

Target Program: Huawei

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#Memory corruption#Logic flaw#RCE#Local Privilege Escalation