This Simple Trick Requires Only Your Phone Number to Hack your Email Account

We all have been receiving spam phone calls and messages on almost daily basis from scammers who want to pilfer your money and personal information, but a new type of social engineering hack that makes use of just your mobile number to trick you is a little scarier. Security firm Symantec is...

Lower mistakes: the U.S. telecommunications Verizon（Verizon）APP vulnerability exists, can be read-vulnerability warning-the black bar safety net

! Verizon（Verizon is the largest US telecommunications companies. Recently, security researchers at Verizon（Verizon its FiOS mobile APP on found a high-risk vulnerability that can allow an attacker access to millions of Verizon user's email account. Vulnerability details FiOS mobile APP on this...

Cross site request forgery (csrf)

fpw.php in e107 through 1.0.4 does not check the userban field, which makes it easier for remote attackers to reset passwords by sending a pwsubmit request and leveraging access to the e-mail account of a banned user...

CVE-2013-6171

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the...

iPhone Fingerprint scanner hack allows attacker to hijack Apple ID using Flight Mode

A German security firm SRL claims a vulnerability in Touch ID Fingerprint Scanner and iCloud allows a hacker to access a locked device and potentially gain control over an owner’s Apple ID. SRL points out that Airplane mode can be enabled on a stolen phone from the lockscreen, which turns off...

Own the Email, Own the Person

For attackers looking to take control of a victim’s online presence, there is no better place to start than the target’s email account. If you own the email, you own the person. That’s never been more true than today, with so many social networks, services and shopping sites attached to users’...

GLSA-201206-03 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-03 Opera: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Opera. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially...

U.S. Ambassador claim to be hacked by Russians

U.S. Ambassador claim to be hacked by Russians Michael McFaul, the U.S. ambassador to Russia, took to Twitter Thursday night to accuse Russian media organization NTV of hacking his cell phone and email account. "I respect the right of the press to go anywhere & ask any question. But do they have ...

Android Passwords are stored in plain text on Disk

Android Passwords are stored in plain text on Disk A Android user complain that , All passwords are stored in plane text on Disk via a message on discussion board of Android. He said "The password for email accounts is stored into the SQLite DB which in turn stores it on the phone's file system i...

ISI (Pakistan) hack email account of Indian Army Major !

ISI Pakistan hack email account of Indian Army Major ! A serving Inter-Services Intelligence ISI officer Major Sameer Ali hacked an Indian Army major's e-mail account in 2010 and extracted many sensitive documents, intelligence sources said. Ali has been named by India in the list of 50 'most...

Design/Logic Flaw

The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation...

CVE-2011-0685

CVE-2011-0685 affects Opera before 11.01 where the Delete Private Data feature’s Clear all email account passwords option was not properly implemented, potentially allowing a physically proximate attacker to access an email account on an unattended workstation. Connected advisories (SUSE/OpenSUSE...

CVE-2011-0685: Improper Input Validation

The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation...

Opera < 11.01 Multiple Vulnerabilities

Binary data 800855.prm...

Opera < 11.01 Multiple Vulnerabilities

Binary data 5747.prm...

Alt-N WebAdmin Multiple Remote Vulnerabilities (XSS, Bypass Access)

The remote host is running Alt-N WebAdmin, a web interface to MDaemon mail server. The remote version of this software is affected by cross-site scripting vulnerabilities due to a lack of filtering on user-supplied input in the file 'usereditaccount.wdm' and the file 'modalframe.wdm'. An attacker...

Outblaze Webmail - Cookie Authentication Bypass

Outblaze Webmail - Cookie Authentication Bypass // source: https://www.securityfocus.com/bid/7115/info Outblaze web mail service has been reported prone to an authentication cookie spoofing vulnerability. This issue may allow a malicious attacker to bypass the cookie-based authentication mechanis...

NOCC: cross-site-scripting bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following cross-site-scripting bug in NOCC: Details - ------- Product: NOCC Affected Version: 0.9.5 and maybe all versions before Immune Version: none, authors are working on it OS affected: all OS with php and mysql Vendor-URL:...

NOCC 0.9.x - Webmail Script Injection

source: https://www.securityfocus.com/bid/4740/info NOCC is a web based email client implemented in PHP4. It includes support for POP3, SMTP and IMAP servers, MIME attachments and multiple languages. A script injection issue has been reported with the way emails are displayed to users of NOCC...

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 store e‑mail account passwords in registry keys using weak encryption, allowing local attackers to read passwords. Affected component: registry storage of credentials; Root cause: weak cryptography. Impact: local confidentiality and integrity compromise. CVSS base score...