Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.

OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure.

In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation.

In OPPO Store APP, there's a possible escalation of privilege due to improper input validation.

In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead to application internal information leak w/o user interaction.

A remote code execution vulnerability in the webview component of OPPO Store app.

A remote code execution vulnerability in the webview component of OnePlus Store app.

There is a command injection problem in the old version of the mobile phone backup app.