DblTek GoIP GSM Gateway Multiple Vulnerabilities

Exploit for hardware platform in category remote exploits DblTek GoIP GSM Gateway Multiple Vulnerabilities Vulnerabilities summary The following advisory describes 2 two vulnerabilities found in DblTek webserver. DBL is “specialized in VoIP products, especially GoIPs. We design, develop,...

Gas Pump Skimmer Sends Card Data Via Text

Skimming devices that crooks install inside fuel station gas pumps frequently rely on an embedded Bluetooth component allowing thieves to collect stolen credit card data from the pumps wirelessly with any mobile device. The downside of this approach is that Bluetooth-based skimmers can be detecte...

gnome-session gsm-xsmp-server.c file denial of service vulnerability

gnome-session is a session tool for the Gnome 2.x desktop environment. A security vulnerability exists in the context of the 'accepticeconnection' function in the gsm-xsmp-server.c file in versions of gnome-session prior to 2.29.92. A local attacker can exploit this vulnerability to cause a denia...

CVE-2017-11171

Bad reference counting in the context of accepticeconnection in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data an invalid magic cookie. Each failed authentication...

CVE-2017-11171: Loop with Unreachable Exit Condition

Bad reference counting in the context of accepticeconnection in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data an invalid magic cookie. Each failed authentication...

skyynet.de XSS vulnerability

Vulnerable URL: https://skyynet.de/gsmphones.php?remark=3529=en=1"...

GSM Community Edition and lagging OpenVAS Plugin Feed

As I already wrote in "Installing OpenVAS 9 from the sources", since May 2017 OpenVAS 9 is available in a form of free virtual appliance. It is called GSM Community Edition GCE and is based on Greenbone commercial product GSM ONE. What's the difference between GSM ONE and free GCE? GSM Community...

The vulnerability of the GERAN component in the Android operating system allows a hacker to trigger a service failure.

The vulnerability of the GERAN component of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failure...

ShadowBrokers Dump More Equation Group Hacks, Auction File Password

The mysterious ShadowBrokers, long thought to have given up their cause, released on Saturday additional hacking tools allegedly belonging to the Equation Group, along with the password guarding the original set of exploits the group planned to auction off. The password was at the tail end of a...

Shadow Brokers Group Releases More Stolen NSA Hacking Tools & Exploits

Remember The Shadow Brokers? They are back. A hackers group that previously claimed to have stolen a bunch of hacking tools malware, zero-day exploits, and implants created by the NSA and gained popularity last year for leaking a portion of those tools is back. Today, The Shadow Brokers group...

GSM SIM Editor 5.15 Buffer Overflow

A buffer overflow vulnerability exists in GSM SIM Editor 5.15. The vulnerability is due to the way GSM SIM Editor handles objects in memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file which allows an attacker to execute arbitrary...

Root privilege backdoor vulnerability in DBL Technology GSM voice gateway

DBL Technology is a communication equipment manufacturer located in Shenzhen, China. Its main products include GSM voice gateway, IP telephony gateway, enterprise softswitch, etc., which are mostly used by telephony companies and VoIP service providers. A root privilege backdoor vulnerability...

DEBIAN-CVE-2016-8595

The gsmparse function in libavcodec/gsmparser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

PT-2016-7513

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.5 Description The issue allows remote attackers to cause a denial of service via a crafted AVI file, specifically through the gsm parse function in libavcodec/gsm parser.c. Recommendations For versions prior to...

forum.gsmhosting.com Open Redirect vulnerability

Vulnerable URL: http://forum.gsmhosting.com/vbb/redirect-to/?redirect=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

Legba Incorporated YateBTS Has a Design Vulnerability

Legba Incorporated YateBTS is software for analog protocol stacks for GSM networks. A design vulnerability exists in Legba Incorporated YateBTS. Since the device is exposed to external connections, an attacker could exploit this vulnerability to compromise the BTS transceiver over the Internet. B...

Stack Buffer Overflow Vulnerability in Legba Incorporated YateBTS

Legba Incorporated YateBTS is software for analog protocol stacks for GSM networks. A stack buffer overflow vulnerability exists in Legba Incorporated YateBTS. An attacker could exploit the vulnerability by sending an oversized UDP packet resulting in a memory buffer overflow, which in turn could...

The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.

The vulnerability exists in the APN decoding function in the GTP and GSM Management dissectors in Wireshark, due to incomplete initialization of buffers. Exploiting this vulnerability allows malicious actors to trigger a service failure abrupt termination of an application’s operation using a...

DSA-3615-1 wireshark - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3615-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...