CVE-2018-7934

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145C432 have a denial of service DoS vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users ma...

CVE-2018-7934

CVE-2018-7934 affects some Huawei smartphones (pre-BLA-L29 8.0.0.145) where the system does not properly adapt to specific screen gestures, allowing a crafted installation of a malicious app to cause the foreground app to crash (DoS) after gesture input. The root cause is a DoS vulnerability rela...

“Unhackable” Bitfi crypto wallet. What’s all the fuss about?

If you haven’t already seen the Bitfi cryptocurrency wallet, check it out here. With backing from John McAfee, it’s claimed that the device is unhackable. So why all the fuss in the infosec community? Here’s the claim they make: ‘Completely un-hackable’ That is a very, very brave claim to make...

CVE-2018-14608

Thomson Reuters UltraTax CS 2017 on Windows has a password protection option; however, the level of protection might be inconsistent with some customers' expectations because the data is directly accessible in cleartext. Specifically, it stores customer data in unique directories...

PT-2018-12614 · Thomson Reuters · Thomson Reuters Ultratax Cs

Name of the Vulnerable Software and Affected Versions: Thomson Reuters UltraTax CS version 2017 Description: The software has a password protection option, but the level of protection may not meet some customers' expectations because the data is stored in cleartext. Customer data is stored in...

Lenovo Help Android app information disclosure vulnerability

Lenovo Help Android app is a Chinese Lenovo Lenovo application that provides online support for Lenovo products such as computers, cell phones and data centers. The app is mainly used to check device information and warranty status of Lenovo products, etc. A security vulnerability exists in the...

Command injection

A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware before 11.21 could allow an authenticated, remote attacker to perform a command injection and execute commands with the privileges of the web server. The vulnerability is due to...

CVE-2018-0341

A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware before 11.21 could allow an authenticated, remote attacker to perform a command injection and execute commands with the privileges of the web server. The vulnerability is due to...

CVE-2018-0341

A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware before 11.21 could allow an authenticated, remote attacker to perform a command injection and execute commands with the privileges of the web server. The vulnerability is due to...

CVE-2018-0341

A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware before 11.21 could allow an authenticated, remote attacker to perform a command injection and execute commands with the privileges of the web server. The vulnerability is due to...

CVE-2018-0341

CVE-2018-0341 affects Cisco IP Phone 6800/7800/8800 Series with Multiplatform Firmware prior to 11.2(1). The web UI allows authenticated, remote command injection due to insufficient input validation, enabling execution of arbitrary shell commands with web server privileges. Cisco Security Adviso...

CVE-2018-0341

A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware before 11.21 could allow an authenticated, remote attacker to perform a command injection and execute commands with the privileges of the web server. The vulnerability is due to...

Sql injection

The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phones, allows SQL injection. One consequence is that an application without the READSMS permission can read SMS messages. This affects Infinix X571 phones, as well as various Lenovo...

Cisco IP Phone 6800, 7800, 8800 Series Command Injection Vulnerability

Cisco IP Phone 6800, 7800 and 8800 Series are different series of IP phone products from Cisco, USA.Multiplatform Firmware is a set of firewall software that runs on it to support multiple platforms. A command injection vulnerability exists in the Web-based UI of the Cisco IP Phone 6800, 7800, an...

Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Web UI Command Injection Vulnerability

A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to perform a command injection and execute commands with the privileges of the web server. The vulnerability is due to insufficient input...

A week in security (July 2 – July 8)

Last week, we tracked back a large mining operation from their Coinhive shortlink, we took a look at online project management tools, we described a new macro-less technique to distribute malware, and talked about a Mac malware that targets crypto-mining users. Other news: Huawei enterprise comms...

Timehop Hacked — Hackers Stole Personal Data Of All 21 Million Users

And the hacks just keep on coming. Timehop social media app has been hit by a major data breach on July 4th that compromised the personal data of its more than 21 million users. Timehop is a simple social media app that collects your old photos and posts from your iPhone, Facebook, Instagram,...

About the security content of iOS 11.4.1

About the security content of iOS 11.4.1 This document describes the security content of iOS 11.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Ex-NSO Employee Caught Selling Stolen Phone Hacking Tool For $50 Million

A former employee of one of the world's most powerful hacking companies NSO Group has been arrested and charged with stealing phone hacking tools from the company and trying to sell it for $50 million on the Darknet secretly. Israeli hacking firm NSO Group is mostly known for selling high-tech...

CVE-2018-7944

Huawei smart phones Emily-AL00A with software 8.1.0.106SP2C00 and 8.1.0.107SP5C00 have a Factory Reset Protection FRP bypass vulnerability. An attacker gets some user's smart phone and performs some special operations in the guide function. The attacker may exploit the vulnerability to bypass FRP...