MDM the mobile terminal management system of the SAP Afaria stored XSS vulnerability using process-vulnerability warning-the black bar safety net

Here, will demo on SAP Afaria, a world-renowned MDM mobile terminal management software for the vulnerability analysis,while the analysis of the network how could an attacker exploit the vulnerability to attack. The black bar safety net Wikipedia: what is MDM? In short, MDM is to help...

Techie Police Officer Builds a Sniffing Tool to Track Stolen Devices (based on War-Driving)

Ever wonder, How can you Track your Stolen Smartphone, Laptop or any Smart Device? ...With IMEI Number? ...Or IP address? ...Or may be some special types of equipment? Well, Not required, because now it is possible to track stolen devices just by scanning their MAC addresses. Yes, Just MAC...

Spy Planes Equipped with Dirtbox Devices Collecting Smartphone Data

The U.S. government is reportedly using spy airplanes equipped with special military-grade snooping equipment to eavesdrop on cell phone information from millions of smartphone users in U.S, according to a new report. This little device, nicknamed "Dirtbox", is being used to mimic mobile phone...

First Android Ransomware that Encrypts SD Card Files

We have seen cybercriminals targeting PCs with Ransomware malware that encrypts your files or lock down your computer and ask for a ransom amount to be paid in a specified duration of time to unlock it. To deliver the Ransomware malwares to the mobile devices, cyber criminals have already started...

Huawei E5331安全绕过和信息泄漏漏洞

Bugtraq ID:66065 Huawei E5331 MiFi mobile hotspot是一款3G路由器设备。 Huawei E5331 MiFi mobile hotspot缺少正确的访问验证，允许远程攻击者无需验证访问WEB接口URL，获取配置信息。或提交特制的POST请求，更改设备配置。 0 Huawei E5331 MiFi mobile hotspot 21.344.11.00.414 厂商补丁： Huawei ----- Huawei E5331 MiFi mobile hotspot 21.344.27.00.414已经修复该漏洞，建议用户下载更新：...

New Android malware forwards incoming messages to hacker

A new type of Android malware that can intercept text messages and forwarding to hackers is discovered by the Russian firm Doctor Web. This is a very serious threat to users, because using this malware attackers can easily get two factor authentication code of your Email or bank accounts. The...

New Android malware forwards incoming messages to hacker

A new type of Android malware that can intercept text messages and forwarding to hackers is discovered by the Russian firm Doctor Web. This is a very serious threat to users, because using this malware attackers can easily get two factor authentication code of your Email or bank accounts. The...

Android Yome Collection 信息泄露漏洞

CVE ID:CVE-2012-2640 Yome Collection是一款基于Android的应用 Yome Collection会在SD卡上存储IMEI信息，攻击者恶意构建恶意应用，诱使用户安装，在没有READPHONESTATE的权限情况下读取SD卡上的IMEI信息 0 Yome Collection for Android 1.8.3及之前版本 厂商解决方案 用户可联系供应商获得最新的应用版本： http://yomecolle.jp/info/androidoshirase/...

CVE-2012-2640

The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card via a crafted application that lacks the READPHONESTATE permission...

Code injection

The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card via a crafted application that lacks the READPHONESTATE permission...

CVE-2012-2640

The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card via a crafted application that lacks the READPHONESTATE permission...

CVE-2012-2640

The CVE-2012-2640 issue affects NEC BIGLOBE Yome Collection for Android (1.8.3 and earlier). A crafted app can read the device IMEI from the SD card without the READ_PHONE_STATE permission, enabling potential IMEI disclosure to remote/benign apps that access the SD card. The vulnerability is tied...

JVN#05102851: Yome Collection for Android issue in management of IMEI

Yome Collection for Android contains an issue which stores the International Mobile Equipment Identity IMEI on a SD card. Applications without the READPHONESTATE permission may obtain the IMEI from the SD card. Impact If a user of the affected product uses a malicious Android application, the IME...

ClubHack Sec Conference 2011 - Hacking your Android

Document Title: =============== ClubHack Sec Conference 2011 - Hacking your Android References: =========== Download: http://www.vulnerability-lab.com/resources/videos/459.wmv View: http://www.clubhack.tv/2011/hacking-your-droid-aditya-gupta/ Release Date: ============= 2012-02-27 Vulnerability...

New Android Trojan Surfaces in China

Lookout Mobile Security discovered a new Android based Trojan called HongTouTou aka ADRD Trojan that is packaging itself in popular Android apps and delivering itself through app markets and Chinese forums. This piece of malware is requesting additional permissions from users and may also be...

olateuim-xss.txt

-Summary- Software: Olate Download Sowtwares Web Site: http://www.olate.co.uk/ Versions: 3.4.2 Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei addmimistrator Risk Level: Middel Description Olate download is prone to Cross site scripting, cause of...

Olate Download 3.4.2~download.php ~ sql injection

VISITE ORIGINAL ADVISORY FOR MORE DETAILS http://myimei.com/security/2007-08-22/olate-download-342downloadphp-sql-injection.html VISITE ORIGINAL ADVISORY FOR MORE DETAILS Software: Olate Download Sowtware's Web Site: http://www.olate.co.uk/ Versions: 3.4.2 Class: Remote Status: Unpatched Exploit:...

Olate Download 3.4.1~environment.php.php~Code Execution

VISITE ORIGINAL ADVISORY FOR MORE DETAILES http://myimei.com/security/2007-08-17/olate-download-341-environmentphpphp-code-execution.html VISITE ORIGINAL ADVISORY FOR MORE DETAILES ——————-Summary—————- Software: Olate Download Sowtware's Web Site: http://www.olate.co.uk/ Versions: 3.4.1 Class:...

Do-it-yourself unlock phone password-vulnerability warning-the black bar safety net

Crash This bar is estimated to be debugging the used,with caution,some crashes only under the battery. 9 9 9 89 2 6 6 display the receiving channel number and received signal strength; 9 9 9 87 8 6 display the contents of the boot time and the boot to the current a long time. Press-after displayi...

[KAPDA::#53] MYBB XSS and Dir Traversal in usercp.php

Vulnerable products : MYBB 1.x Vendor: http://www.mybboard.net Risk: Low Vulnerabilities: MYBB XSS and Dir Traversal in usercp.php Date : -------------------- Found : Feb 22 2006 Vendor Contacted : N/A Release Date : N/A About : -------------------- MyBB is a powerful, efficient and free forum...