The FBI's Anom Stunt Rattles the Encryption Debate

The agency spent years running a secure phone network for criminals. So much for “going dark.”...

Totp-Ssh-Fluxer - Take Security By Obscurity To The Next Level (This Is A Bad Idea, Don'T Really Use This Please)

Some people change their SSH port on their servers so that it is slightly harder to find for bots or other nasties, and while that is generally viewed as an action of security through obscurity it does work very well at killing a lot of the automated logins you always see in /var/log/auth.log...

OPPO A92s suffers from an information disclosure vulnerability (CNVD-2021-44382)

OPPO A92s is a 5G phone from OPPO. The OPPO A92s suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

CVE-2021-33840

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service insertion of many fake records related to COVID-19 because Phone Number data lacks a digital signature...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

CVE-2021-33840

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service insertion of many fake records related to COVID-19 because Phone Number data lacks a digital signature...

Design/Logic Flaw

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service insertion of many fake records related to COVID-19 because Phone Number data lacks a digital signature...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

CVE-2021-33840

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service insertion of many fake records related to COVID-19 because Phone Number data lacks a digital signature...

Gtlab luca 数据伪造问题漏洞

Gtlab luca is a Gtlab open source application. A secure and encrypted exchange of contact information. A data forgery issue vulnerability exists in Luca version 1.1.14, which can be exploited by remote attackers to cause a denial of service due to a lack of digital signatures for phone number dat...

FreePBX 13.x <= 13.0.93.2, 14.x <= 14.0.22.2, 15.x <= 15.0.19.2 RCE Vulnerability

FreePBX is prone to a remote code execution RCE vulnerability. NOTE: This VT is reporting a false positive and therefore has been deprecated. The vulnerability exists in the Restapps / Phone apps module and not in the core framework itself. SPDX-FileCopyrightText: 2021 Greenbone AG Some text...

CVE-2020-10666

The Restapps (Rest Phone apps) module in Sangoma FreePBX and PBXact (versions 13–15 up to 15.0.19.2) is vulnerable to remote code execution via a URL variable to an AMI command. Root cause is a flaw in Restapps’ handling of AMI commands that allows injection. Impact per sources is high (remote, n...

Razer Phone cell phones have an information leakage vulnerability

The Razer Razer Phone Full Netbook is a smartphone from the Razer branded series. The Razer Phone cell phone suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

May 25, 2021—KB5003214 (OS Builds 19041.1023, 19042.1023, and 19043.1023) Preview

None None...

CVE-2021-21732

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...

CVE-2021-21732

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...

CVE-2021-21732

CVE-2021-21732 is an improper access-control vulnerability in a ZTE Axon 11 5G device (CN_P725A12/P725A12:10/QKQ1.200816.002/20201116.175317:user/release-keys). Third-party apps can read certain files in the /proc filesystem due to weak permission settings, enabling potential exposure of sensitiv...

Listeo < 1.6.11 - Multiple XSS & XFS vulnerabilities

The theme did not properly sanitise some parameters in its Search, Booking Confirmation and Personal Message pages, leading to Cross-Site Scripting issues - Unauthenticated Reflected XSS | Search query, vulnerable parameters: keywordsearch and locationsearch - Authenticated Persistent XSS & XFS |...