CVE-2018-0290

A vulnerability in the TCP stack of Cisco SocialMiner could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the notification system. The vulnerability is due to faulty handling of new TCP connections to the affected application. An attacker could exploit th...

CVE-2018-0325

CVE-2018-0325 affects Cisco IP Phone 7800/8800 series (and 8821) via vulnerable SIP call handling. The SDP parser’s incomplete input validation enables an unauthenticated remote attacker to drop all active calls and restart the SIP process, causing a DoS. Root cause: SDP parameter validation flaw...

CVE-2018-0325

A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected phone. The vulnerability is due t...

CVE-2018-0325

A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected phone. The vulnerability is due t...

ERROR: "This app has been disabled because entitlement to the app was not found if you have entitlement to this app, you may delete and re-install it"

Secure Mail fails to be launched on Huawei Phone with error: "This app has been disabled because entitlement to the app was not found if you have entitlement to this app, you may delete and re-install it"...

Cisco IP Phone 7800 Series and 8800 Series and Cisco Wireless IP Phone 8821 Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 7800 Series, IP Phone 8800 Series, and Wireless IP Phone 8821 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected phone. The vulnerability is...

Apple’s iOS 11.4 update may protect devices from phone cracking firms

By Waqas Apple is currently testing iOS 11.4 beta update for iPhone and This is a post from HackRead.com Read the original post: Apple's iOS 11.4 update may protect devices from phone cracking firms...

Authentication flaw

Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129SP2C00 and earlier versions than 8.0.0.129SP2C01 have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations...

Think You’ve Got Your Credit Freezes Covered? Think Again.

I spent a few days last week speaking at and attending a conference on responding to identity theft. The forum was held in Florida, one of the major epicenters for identity fraud complaints in United States. One gripe I heard from several presenters was that identity thieves increasingly are...

Tracking tens of thousands of kids worldwide

tl;dr Gator Watch - a GPS watch for kids - is leaking data in all ends and anyone on the Internet can live track your kid. We're not talking about a security vulnerability, we're talking about non-existing security. Summary Who: Gator Watch Severity level: Critical Reported: August 2017 Reception...

mobile-phone-buy.ru XSS vulnerability

Open Bug Bounty ID: OBB-613748 Description| Value ---|--- Affected Website:| mobile-phone-buy.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application...

mobile-phone-buy.ru XSS vulnerability

Open Bug Bounty ID: OBB-606730 Description| Value ---|--- Affected Website:| mobile-phone-buy.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-8421

Unify former Siemens OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow remote attackers to gain super-user privileges by leveraging SSH access and incorrect ownership of 1 ConfigureCoreFile.sh, 2 Traceroute.sh, 3 apps.sh, 4 conversionjava2native.sh, 5 coreCompression.sh, 6...

CVE-2014-9563

CRLF injection vulnerability in the web-based management WBM interface in Unify former Siemens OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allows remote authenticated users to modify the root password and consequently access the debug port using the serial interface via th...

Crlf injection

CRLF injection vulnerability in the web-based management WBM interface in Unify former Siemens OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allows remote authenticated users to modify the root password and consequently access the debug port using the serial interface via th...

Code injection

Unify former Siemens OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow remote attackers to gain super-user privileges by leveraging SSH access and incorrect ownership of 1 ConfigureCoreFile.sh, 2 Traceroute.sh, 3 apps.sh, 4 conversionjava2native.sh, 5 coreCompression.sh, 6...

CVE-2014-9563

CVE-2014-9563 : The affected products are Unify (formerly Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices prior to release R3.32.0, where a CRLF injection in the web-based management (WBM) interface enables remote authenticated users to modify the root password. This can lead to acc...

CVE-2014-8422

The CVE-2014-8422 entry affects Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices prior to R3.32.0, where the web-based management (WBM) interface generates session cookies with insufficient entropy, enabling remote attackers to hijack sessions via brute-force. The provi...

CVE-2014-8421

Unify former Siemens OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow remote attackers to gain super-user privileges by leveraging SSH access and incorrect ownership of 1 ConfigureCoreFile.sh, 2 Traceroute.sh, 3 apps.sh, 4 conversionjava2native.sh, 5 coreCompression.sh, 6...