CVE-2019-15803

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50AAHH.0C0. Through an undocumented sequence of keypresses, undocumented functionality is triggered. A diagnostics shell is triggered via CTRL-ALT-t, which prompts for the password returned by fdssyspassDebugPasswdret. The...

asterisk -- Re-invite with T.38 and malformed SDP causes crash

The Asterisk project reports: If Asterisk receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a crash will occur...

Archos Safe-T Information Disclosure Vulnerability

Archos Safe-T is a hardware-based cryptocurrency wallet device. An information disclosure vulnerability exists in Archos Safe-T, which arises from errors such as configuration during operation of a networked system or product, and can be exploited by an unauthorized attacker to gain access to...

CVE-2019-14358

On Archos Safe-T devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be able to...

CVE-2019-14358

On Archos Safe-T devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be able to...

CVE-2019-14358

CVE-2019-14358 concerns Archos Safe-T hardware wallets. A side-channel exists in the row-based OLED display where the power draw of each display cycle correlates with the number of illuminated pixels, enabling partial recovery of display contents. The documented risk requires the attacker to have...

PT-2019-13637

Name of the Vulnerable Software and Affected Versions Archos Safe-T devices affected versions not specified Description A side channel was discovered related to the row-based OLED display on Archos Safe-T devices. The power consumption of each display cycle varies based on the number of illuminat...

CVE-2019-14358: Observable Discrepancy

On Archos Safe-T devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be able to...

SQL Injection Vulnerability in p****t.asp page of Dragon Pulse Technology website builder system

Founded in July 2005, Dragon Pulse Technology is dedicated to website construction, animation design, program development, domain name space services, network services and information services for enterprises and individuals. SQL injection vulnerability exists in the pt.asp page of the website...

SQL injection vulnerability in D***t.aspx page of enterprise application management platform of Shanghai SAMS Software Co.

Sanmeng enterprise application management platform meets users' needs to realize all kinds of document management, office automation and all kinds of business management, such as file management, contract management, project document management, notice and announcement, receipt and dispatch of...

t-proj.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-990572 Security Researcher devl00p Helped patch 3018 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting t-proj.com website and it...

t-shock.eu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-986878 Security Researcher AmineChabik Helped patch 63 vulnerabilities Received 2 Coordinated Disclosure badges Received 1 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting t-shock.eu website and its...

CVE-2019-13343

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not...

CVE-2019-16257

CVE-2019-16257 relates to SIMalliance Toolbox Browser (S@T Browser) on the UICC in some Motorola devices. The issue allows remote attackers to retrieve location and IMEI information, or other data and commands, via SIM Toolkit (STK) instructions in an SMS message (Simjacker). The Red Hat/NVD/NIST...

New SIM Card Flaw Lets Hackers Hijack Any Phone Just By Sending SMS

Cybersecurity researchers today revealed the existence of a new and previously undetected critical vulnerability in SIM cards that could allow remote attackers to compromise targeted mobile phones and spy on victims just by sending an SMS. Dubbed "SimJacker," the vulnerability resides in a...

PT-2019-14603

Name of the Vulnerable Software and Affected Versions Motorola devices affected versions not specified Description The issue allows remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit STK instructions in an SMS message...

CVE-2019-16257: Undefined Security Weakness

Some Motorola devices include the SIMalliance Toolbox Browser aka S@T Browser on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit STK instructions in an SMS message, aka Simjacker...

CVE-2019-16256: Undefined Security Weakness

Some Samsung devices include the SIMalliance Toolbox Browser aka S@T Browser on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit STK instructions in an SMS message, aka Simjacker...

Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-zb

Summary AT&T has released versions 1801-zb for the Vyatta 5600. Details of these releases can be found at https://cloud.ibm.com/docs/infrastructure/virtual-router-appliance?topic=virtual-router-appliance-at-t-vyatta-5600-vrouter-software-patchesat-t-vyatta-5600-vrouter-software-patches...

CVE-2019-15297

respjsipt38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to a T.38 re-invite initiated by Asterisk. The crash occurs because of a NULL session media object dereference...