Obama Orders NSA Bulk Metadata Surveillance Reforms

President Obama today announced reforms to the National Security Agency’s bulk metadata collection program under Section 215 of the PATRIOT Act, ordering a transition that would end the program as it exists today, and prohibit the government from storing and accessing the data without secret cour...

NSA Metadata Program Likely Not Cost-Effective, Researchers Say

While much of the coverage of the surveillance programs revealed by Edward Snowden have focused on the legality and constitutionality of the collection of metadata and Internet traffic in the name of counter-terrorism and national security, the question of whether these programs are actually cost...

CVE-2013-5156

CVE-2013-5156 affects Apple iOS before 7, where the Telephony subsystem does not require API conformity for access to telephony-daemon interfaces. A crafted app can bypass restrictions and send direct requests to the daemon, potentially causing interference with telephony functionality. The Apple...

YeaLink IP Phone Firmware <=9.70.0.100 Unauthenticated Phone Call Vulnerability

Exploit for hardware platform in category web applications Exploit Title: YeaLink IP Phone SIP-TxxP firmware garnelo.eu Vendor Homepage: http://yealink.com Software Link: http://yealink.com/productlist.aspx?BaseInfoCateId=147&CateId=147&ProductsCateID=147 Version: 9.70.0.100 and lower Tested on:...

YeaLink IP Phone Firmware 9.70.0.100 - Phone Call

YeaLink IP Phone Firmware 9.70.0.100 - Phone Call Exploit Title: YeaLink IP Phone SIP-TxxP firmware garnelo.eu Vendor Homepage: http://yealink.com Software Link: http://yealink.com/productlist.aspx?BaseInfoCateId=147&CateId=147&ProductsCateID=147 Version: 9.70.0.100 and lower Tested on: YeaLink I...

Cisco IOS Software Music on Hold Information Disclosure Vulnerability

Cisco IOS software contains a vulnerability that could allow an unauthenticated, remote attacker to access and disclose sensitive information. The vulnerability is due to insecure handling of multicast network traffic. An unauthenticated, remote attacker could exploit the vulnerability by...

TigerBot - SMS Controlled Android Malware Stealing Information

TigerBot - SMS Controlled Android Malware Stealing Information A new form of Android malware controlled via SMS messages has been discovered and the malware can record phone calls, upload the device's GPS location, and reboot the phone, among other things. Researchers at NQ Mobile, working...

Anonymous Leaks FBI, Scotland Yard Phone Call Detailing Hacking Investigations

Hacktivists with the online collective Anonymous have released a recording of a sensitive phone call between officials with the FBI, Scotland Yard and other foreign police agencies related to ongoing investigations into hacking. The conference call, which occurred Jan. 17, focused on the continue...

windows Mobile 6.5 TR Phone Call Shellcode

Exploit for win32 platform in category shellcode ========================================== windows Mobile 6.5 TR Phone Call Shellcode ========================================== / Device: HTC Touch2 System: Windows Mobile 6.5 TR WinCE 5.0.2 Coded by Celil ‹n¸ver from SecurityArchitect Contact:...

Windows Mobile 6.5 TR Phone Call Shellcode

Windows Mobile 6.5 TR Phone Call Shellcode. Shellcode exploit for windows platform Title: Windows Mobile 6.5 TR Phone Call Shellcode Author: Celil Ünüver / Device: HTC Touch2 System: Windows Mobile 6.5 TR WinCE 5.0.2 Coded by Celil ‹n¸ver from SecurityArchitect Contact: celilunuvernspamgmail.com...

iPhone Safari Phone Auto Dial

Released since Apple published the iPhone 3.0 security fixes. Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Apple www.apple.com Device: iPhone 3G iPhone 1st Gen Firmware: 2.1 possible earlier versions Device Type: smart phone Subsystems: Safari and mobile telephony...

Design/Logic Flaw

The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physically proximate attackers to leverage the emergency-call ability of locked devices to make a phone call to an arbitrary number...

CVE-2008-4228

The CVE-2008-4228 issue affects Apple iPhone OS versions 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1. A design/logic flaw in the Passcode Lock feature lets physically proximate attackers exploit the device’s Emergency Call ability to place a call to an arbitrary number while the device is locked...

CVE-2008-4233

The CVE-2008-4233 entry affects Safari in Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1, where the call-approval dialog is not isolated from the process launching new applications. This allows a crafted HTML document to cause remote phones calls. Exploitation details are not provid...

CVE-2008-4228: Undefined Security Weakness

The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physically proximate attackers to leverage the emergency-call ability of locked devices to make a phone call to an arbitrary number...

vxworks ftpd buffer overflow

It might be possible to make the remote FTP server crash by issuing this command : CEL aaaa...aaaa This problem is similar to the SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...