4513 matches found
CVE-2017-17224
Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206C00E205R3P1 have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal...
Two Former Twitter Employees Caught Spying On Users For Saudi Arabia
Two former employees of Twitter have been charged with spying on thousands of Twitter user accounts on behalf of the Saudi Arabian government, likely with the purpose of unmasking the identity of dissidents. According to an indictment filed on November 5 and unsealed just yesterday, one of the...
Design/Logic Flaw
Viber through 11.7.0.5 allows a remote attacker who can capture a victim's internet traffic to steal their Viber account, because not all Viber protocol traffic is encrypted. TCP data packet 9 on port 4244 from the victim's device contains cleartext information such as the device model and OS...
Mail.ru: [pandao.ru] possibility to attach arbitrary phone number to account registered via social network
It was possible to attach an arbitrary unregistered phone number to account registered via different id e.g. social network id. This behavior can prevent user from registering with his phone number and facilitate phishing attack if victim attempts to login by phone number...
Chinese Hackers Compromise Telecom Servers to Spy on SMS Messages
A group of Chinese hackers carrying out political espionage for Beijing has been found targeting telecommunications companies with a new piece of malware designed to spy on text messages sent or received by highly targeted individuals. Dubbed "MessageTap ," the backdoor malware is a 64-bit ELF da...
UniCredit Bank Suffers 'Data Incident' Exposing 3 Million Italian Customer Records
UniCredit, an Italian global banking and financial services company, announced today that it suffered a security incident that leaked some personal information belonging to at least 3 million of its domestic customers. Officially founded in 1870, UniCredit is Italy's biggest banking and financial...
Cisco SPA100 Cross-Site Scripting Vulnerability
The Cisco SPA100 Series is an analog phone adapter from Cisco that allows your standard analog phone to access Internet telephony services through an RJ-11 phone port. A cross-site scripting vulnerability exists in the web-based management interface of Cisco SPA100 Series 1.4.1 SR3 and earlier. T...
Cisco SPA100 Series Analog Telephone Adapter Multiple Arbitrary Code Execution Vulnerabilities
Description Cisco SPA100 Series Analog Telephone Adapter is prone to multiple arbitrary code-execution vulnerabilities. Successfully exploiting these issues will allow attackers to execute arbitrary code with elevated privileges. These issues are being tracked by Cisco Bug ID CSCvq50494...
Twitter Puts Profit Ahead of User Privacy—Just Like Facebook Did Before
Twitter funneled two-factor authentication phone numbers into their ad targeting platform—but they weren't the only ones...
Login Bypass Vulnerability in Xianqi Kindergarten Online Management System
Xianqi Kindergarten Online Management System is a professional and easy-to-use kindergarten online management system that supports real-time synchronization of data between smartphone APP and computer. There is a login bypass vulnerability, which can be exploited by attackers to login the system...
Apple iOS and Apple iPadOS VoiceOver Component Lock Screen Bypass Vulnerability
Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer.VoiceOver is one of the voice assistance components. A lock screen bypass vulnerability exists in the VoiceOver...
PT-2019-3336 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers ISRs affected versions not specified Description: A vulnerability in the Dialer interface feature for ISDN connections could allow an unauthenticated, adjacent attacker t...
'Simjacker' Attack Can Track Phones Just by Sending a Text
White house spying, North Korea sanctions, and more of the week's top security news...
Simjacker vulnerability lets attackers track your location with an SMS
By Sudais The Simjacker vulnerability could extend to over 1 billion mobile phone users globally to be exact it has targeted 30 countries. This is a post from HackRead.com Read the original post: Simjacker vulnerability lets attackers track your location with an SMS...
An Unprecedented Cyberattack Hit the US Power Grid
Exposed Facebook phone numbers, an XKCD breach, and more of the week's top security news...
Unsecured database leaks phone numbers of 419 million Facebook users
By Sudais The unsecured database contained 133 million records from the US, 18 million in the UK and 50 million in Vietnam - All from Facebook users. This is a post from HackRead.com Read the original post: Unsecured database leaks phone numbers of 419 million Facebook users...
Twitter temporarily disables 'Tweeting via SMS' after CEO gets hacked
Twitter today finally decided to temporarily disable a feature, called 'Tweeting via SMS,' after it was abused by a hacking group to compromise Twitter CEO Jack Dorsey last week and sent a series of racist and offensive tweets to Dorsey's followers. Dorsey's Twitter account was compromised last...
CVE-2019-15870
The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field...
