4511 matches found
CVE-2018-18566
The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business...
Design/Logic Flaw
The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business...
CVE-2018-18566
Polycom VVX 500/601 devices (firmware
AudioCodes 440HD / 450HD IP Phone 3.1.2.89 Man-In-The-Middle
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2018-026 Product: 440HD / 450HD IP Phone Manufacturer: AudioCodes Affected Versions: = 3.1.2.89 Tested Versions: VC3.1.1.43.1, VC3.1.2.89 Vulnerability Type: X.509 validation - Man-in-the-Middle CWE-300 Risk Level: Medium Solution...
Infog - Information Gathering Tool
InfoG is a Shellscript to perform Information Gathering. Features Check Website info Check Phone info IP Tracker Check Valid E-mail Check if site is Up/Down Check internet speed Check Personal info Find IP behind Cloudflare Find Subdomains Port Scan Multi-threaded Check CMS Check DNS leaking Usag...
CVE-2018-7924
CVE-2018-7924 affects Huawei Anne-AL00 phones with versions earlier than 8.0.0.151(C00). The issue is an information leak caused by improper permission settings for certain USB commands, enabling an attacker with physical access to connect via USB and obtain specific device information. Connected...
Qiku 360 Phone N6 Pro 1801-A01 Denial of Service Vulnerability
The Qiku 360 Phone N6 Pro 1801-A01 is a smartphone from the Chinese company Qiku Internet Technology. A denial of service vulnerability exists in the /dev/block/mmcblk0rpmb driver kernel module in the Qiku 360 Phone N6 Pro 1801-A01, which can be exploited to cause a denial of service null pointer...
CVE-2018-18318
The /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows attackers to cause a denial of service NULL pointer dereference and device crash via a crafted 0xc0d8b300 ioctl call...
CVE-2018-18318
The /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows attackers to cause a denial of service NULL pointer dereference and device crash via a crafted 0xc0d8b300 ioctl call...
CVE-2018-18318
The CVE-2018-18318 issue affects the /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices. A crafted ioctl call (0xc0d8b300) can trigger a NULL pointer dereference, leading to a denial of service and device crash. Connected documents confirm the affected component...
Quasar - An Information Gathering Framework For Lazy Penetration Testers
Quasar Is An Information Gathering Framework For Penetration Testers Coded By Belahsan Ouerghi: Website Informations E-mail Address Checker Phone Number Information Credit Card Bin Checker Ip Locator Port Scanner Installation sudo apt-get install git git clone...
30 Million Facebook Accounts Were Hacked: Check If You're One of Them
Late last month Facebook announced its worst-ever security breach that allowed an unknown group of hackers to steal secret access tokens for millions of accounts by taking advantage of a flaw in the 'View As' feature. At the time of the initial disclosure, Facebook estimated that the number of...
30M Facebook breach; includes users phone numbers and location data
By Waqas FBI has asked Facebook not to discuss who may be behind this attack. On September 28th, 2018 the social media giant Facebook announced that it suffered a massive data breach in which hackers stole access tokens of millions of accounts after exploiting a critical vulnerability in its "Vie...
From Now On, Only Default Android Apps Can Access Call Log and SMS Data
A few hours ago the company announced its "non-shocking" plans to shut down Google+ social media network following a "shocking" data breach incident. Now to prevent abuse and potential leakage of sensitive data to third-party app developers, Google has made several significant changes giving user...
Cisco Unified IP Phone 7900 Series WEB Interface Cross-Site Scripting Vulnerability
Cisco Unified IP Phone 7900 Series is a 7900 series IP phone product from Cisco USA. A cross-site scripting vulnerability exists in the web-based administration interface of the Cisco Unified IP Phone 7900 Series, which arises from the program's failure to adequately validate user-submitted input...
QIWI: Возможность регистрации на сайте qiwi.com на любой номер телефона
Summary При регистрации на сайте qiwi.com присылается один и тот же код подтверждения в СМС. Impact Возможность зарегистрироваться под любым новым пользователем за счет перебора кода из СМС...
CVE-2018-15434
A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...
CVE-2018-15434
A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...
Cross site scripting
A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...
CVE-2018-15434 Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...