CVE-2020-9245

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

The NSA's Tips to Keep Your Phone From Tracking You

Plus: A Canon ransomware hack, a nasty Twitter bug, and more of the week's top security news...

Meowcast App Has Denial of Service Vulnerability

Meowcast APP is a non-entertainment live interactive APP. A denial of service vulnerability exists in Meowcast APP. An attacker can exploit the vulnerability to cause the phone to reboot...

New tool detects fake 4G cell phone towers

By Sudais Asif Dubbed Crocodile Hunter; the tool works by scanning for 4G signals. This is a post from HackRead.com Read the original post: New tool detects fake 4G cell phone towers...

NSA Warns Smartphones Leak Location Data

Mobile devices expose location data in more ways than most people know, and turning off services such as Find My Phone, Wi-Fi and Bluetooth can help mitigate tracking, but are no silver bullet that prevents a third party from tracking users. That’s advice shared by U.S. top spy division, the...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2020-57803)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An information disclosure vulnerability exists in Microsoft Edge based on EdgeHTML. The vulnerability can be exploited by an attacker to obtain a user's personal information by making a...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2020-51786)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. An information disclosure vulnerability exists in Microsoft IE 11. The vulnerability can be exploited by an attacker to obtain a user's personal information by making ...

Hackers used phone phishing on Twitter employee to access internal tools

By Waqas Twitter was hit by a phone spear-phishing attack on July 15th, 2020. This is a post from HackRead.com Read the original post: Hackers used phone phishing on Twitter employee to access internal tools...

Grandstream HT800 series OS Command Injection Vulnerability

The Grandstream HT800 series is an HT800 series analog phone adapter from Grandstream. An operating system command injection vulnerability exists in the Grandstream HT800 series using firmware version 1.0.17.5 and earlier. This vulnerability can be exploited to execute arbitrary commands as root ...

Crypto wallet Ledger data breach; hackers steal 1m emails & other data

By Sudais Asif Ledger has acknowledged that hackers also gained access to 9500 Phone... This is a post from HackRead.com Read the original post: Crypto wallet Ledger data breach; hackers steal 1m emails & other data...

Security Advisory - Insufficient Authentication Vulnerabilities in Some Huawei Smart Phone Product

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. Vulnerability ID: HWPSIRT-2019-12302 Th...

A Hidden Risk for Domestic Violence Victims: Family Phone Plans

Abusers can use shared accounts to stalk and harass victims, and plans aren’t always easy to escape...

Cisco IP Phone SIP Detection

Binary data ciscoipphonesipdetect.nbin...

CVE-2020-0107

In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Mail.ru: Bypass OTP on contact back request at https://driver.city-mobil.ru/

It was possible to bypass phone verification for support call back request...

Shenzhen Jam Times Technology Co., Ltd. popular live-streaming APP has denial-of-service vulnerability

Popular Live App is a live streaming platform. There is a denial-of-service vulnerability in the Popularity Live APP of Shenzhen Jam Times Technology Co. Attackers can use the vulnerability to make the APP crash and stop running, resulting in a reboot of the phone...

Security Advisory - Stack Overflow Vulnerability in Huawei Smart Phone Product

There is a stack overflow vulnerability in some Huawei smart phone. An attacker can craft specific packet to exploit this vulnerability. Due to insufficient verification, this could be exploited to tamper with the information to affect the availability. Vulnerability ID: HWPSIRT-2019-11030 This...

How to Passcode-Lock Any App on Your Phone

Letting someone see your phone shouldn't also mean letting them snoop on your texts, photos, or emails. Here's how to stop it from happening...

Encrypted phone service EncroChat dismantled; leading to 800+ arrests

By Deeba Ahmed We reported about the closure of the infamous... This is a post from HackRead.com Read the original post: Encrypted phone service EncroChat dismantled; leading to 800+ arrests...

Scams and how to spot them

We’re in strange times at the moment. Some things dont change though e.g. the scams and fraudulent activity designed to separate people from their money or identity. When dealing with these scams the main thing to remember is: If it seems too good to be true, it probably is. While that statement ...