GNUTurk Mods.PHP Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24152/info Gnuturk is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website...

Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation

No description provided by source. Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product Web Page: http://www.huawei.com Affected version: 16.002.03.16.124 Summary: du Mobile Broadband is a shareware application for du EITC UAE users...

Ethereal <= 0.10.9 - Denial of Service

No description provided by source. / Ethereal 3G-A11 remote buffer overflow PoC exploit -------------------------------------------------- Coded by Leon Juranic [email protected] LSS Security http://security.lss.hr/en/ / include stdio.h include sys/socket.h include sys/types.h include sys/stat.h...

Using USB Modems to Phish and Send Malicious SMS Messages

Some USB modems can be leveraged to send malicious SMS messages and even carry out spear-phishing attacks – sometimes in conjunction with each other – thanks to a cross-site request forgery vulnerability present in the device’s web interfaces. According to Swedish security researcher Andreas Lind...

Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation

Exploit for windows platform in category local exploits Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product Web Page: http://www.huawei.com Affected version: 16.002.03.16.124 Summary: du Mobile Broadband is a shareware application...

Beetel Connection Manager 'NetConfig.ini'文件处理远程缓冲区溢出漏洞

BUGTRAQ ID: 63414 Beetel Connection Manager是一套3G无线上网卡的连接管理器。 Beetel Connection Manager验证 NetConfig.ini 文件不正确时可触发缓冲区溢出，这可使上下文独立的攻击者造成应用崩溃，停止响应，也可能执行任意代码。 0 beetel Beetel Connection Manager PCWBTLINDV1.0.0B04 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Beetel Connection Manager PCW_BTLINDV1.0.0B04 - Local Buffer Overflow (SEH)

!/usr/bin/python from struct import pack Exploit Title:Beetel Connection Manager SEH Buffer Overflow Software for usb wireless Homepage:http://www.beetel.in/business-solutions/international-business/3g-products/g31-3g-data-card Version:PCWBTLINDV1.0.0B04 Software...

Beetel Connection Manager SEH Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits !/usr/bin/python from struct import pack Exploit Title:Beetel Connection Manager SEH Buffer Overflow Software for usb wireless Homepage:http://www.beetel.in/business-solutions/international-business/3g-products/g31-3g-data-card...

Huawei B153 3G/UMTS router WPS weakness

Huawei B153 3G/UMTS router WPS weakness ======================================= ADVISORY INFORMATION Title: Huawei B153 3G/UMTS router WPS weakness Discovery date: 21/05/2013 Release date: 05/08/2013 Advisory URL: http://blog.emaze.net/2013/08/huawei-b153-3gumts-router-wps-weakness.html Credits:...

Huawei E587 3G Mobile Hotspot Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2013-2612 Huawei E587 3G Mobile Hotspot Command Injection Summary: Huawei E587 3G Mobile Hotspot, version 11.203.27, is prone to a command injection vulnerability in the Web UI. Successful exploitation allows unauthenticated attackers to execute...

CVE-2013-4622

The CVE-2013-4622 entry concerns the HTC Droid Incredible 3G Mobile Hotspot feature, where the device ships with a default WPA2 PSK of 1234567890. The underlying issue is the predictable default passphrase, which can allow a remote attacker within WLAN range to gain access to the hotspot. Documen...

Faux, Hacked Apps Continue to Litter Google Play Marketplace, Developer Alleges

Phony, potentially malicious apps are continuing to make their way into Google’s Play marketplace, triggering debate over whether applications are being properly vetted for adhering to the company’s marketplace policies. Developers at the Root Uninstaller Team have called out another app publishe...

UbnHD2 : Ubuntu based Pentesting OS for Mobiles

Most of the crazy readers always demand for some solution to turn their Android Smartphone into a Hacking Machine. There are various solutions, like installing some penetration testing android based tools like ANTI, dSploit, FaceNiff etc and also Installing ARM version of Backtrack OS. Today I...

Security flaw in 3G could allow anyone to track your smartphone

New privacy threats have been uncovered by security researchers that could allow every device operating on 3G networks to be tracked, according to research from the University of Birmingham with collaboration from the Technical University of Berlin. Researchers said that standard off-the-shelf...

Huawei Internet Mobile Overflow

!/usr/bin/perl Title : Huawei Technologies - Internet Mobile 0day Unicode SEH Based Vulnerability . Author : Dark-Puzzle Versions : All Versions Are Vulnerable , The behavior of the program when exploiting may vary from an OS to another OS . Vulnerable By Vendor : Morocco - Meditel 3G & Maroc...

Design/Logic Flaw

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...

Maroc Telecom (HUAWEI Technologies) Exception handling

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

Cyberoam UTM 10.01.2 build 059 File Include Vulnerabilities

Exploit for multiple platform in category web applications Title: ====== Cyberoam UTM v10.01.2 build 059 - File Include Vulnerabilities Introduction: ============= Cyberoam Unified Threat Management appliances offer comprehensive security to organizations, ranging from large enterprises to small...

Mind that signal

The pace of change in mobile spying applications is rapid. However, when it comes to intercepting phone calls in the field, phones that use the older 2G mobile communications standard are easier to crack. Often, organizations that want to carry out an attack will force a mobile device from 3G int...

Attacking 3G and 4G Mobile Tele-Communications Networks

Document Title: =============== Attacking 3G and 4G Mobile Tele-Communications Networks References: =========== Document: https://www.vulnerability-lab.com/resources/documents/320.pdf Speaker: https://conference.hitb.org/hitbsecconf2011kul/?pageid=1782 Original Mirror:...