Design/Logic Flaw

A vulnerability in Session Initiation Protocol SIP call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the SIP process unexpectedly restarting. All active phone calls are dropped as the SIP process...

CVE-2017-6656

A vulnerability in Session Initiation Protocol SIP call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the SIP process unexpectedly restarting. All active phone calls are dropped as the SIP process...

CVE-2017-6656

A vulnerability in Session Initiation Protocol SIP call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the SIP process unexpectedly restarting. All active phone calls are dropped as the SIP process...

CVE-2017-6656

Cisco IP Phone 8800 Series SIP DoS (CVE-2017-6656): An unauthenticated, remote attacker can cause the SIP process to restart, dropping all active calls. Vulnerable component: SIP call handling in Cisco IP Phone 8800 devices. Root cause noted as incomplete input validation of SIP headers per Cisco...

Tongfang Mybody Smart Scale Android App Has Design Flaw Vulnerability

Tongfang Mybody Smart Scale Android app is a full-featured health management device. A design flaw vulnerability exists in the cell phone number verification login function of Tongfang Mybody Smart Scale Android app. An attacker can exploit the vulnerability to log into any user's account...

Cisco IP Phone 8800 Series Denial of Service Vulnerability

Cisco IP Phone 8800 Series is a telephone product from Cisco USA that provides video and VoIP communication features. A denial of service vulnerability exists in the Session Initiation Protocol SIP call handling in the Cisco IP Phone 8800 Series, which arises from the program's failure to properl...

FTC Recommends Steps to Protect Against Mobile Phone Theft

The Federal Trade Commission FTC has released an alert about the theft of mobile phones and the best way to prepare for and recover from this kind of theft. Precautionary steps include regularly backing up the data on the phone, using strong passwords, and using two-factor authentication on any...

Buy Slowly App has an arbitrary user registration vulnerability

Buy Slowly APP is a client application that provides users with a shopping guide and price comparison website that brings together information on offers, event promotions, historical price trends, etc. from all major online shopping malls. There is an arbitrary user registration vulnerability in...

Huawei P7 and P8 Youth Edition GPU Driver Denial of Service Vulnerability

Huawei P7 and P8 Youth Edition are smartphone devices from Huawei, a Chinese company.GPU driver is one of the graphics drivers. A denial of service vulnerability exists in the GPU driver in the Huawei P7 and P8 Youth Edition. An attacker can exploit this vulnerability by tricking a user into...

Cisco IP Phone 8800 Series SIP DoS Vulnerability (cisco-sa-20170607-sip)

A vulnerability in Session Initiation Protocol SIP call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the SIP process unexpectedly restarting. All active phone calls are dropped as the SIP process...

Cisco IP Phone 8800 Series SIP Denial of Service Vulnerability

A vulnerability in Session Initiation Protocol SIP call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the SIP process unexpectedly restarting. All active phone calls are dropped as the SIP process...

Sunshine Car Life APP has information leakage vulnerability

Sunshine Car Life APP is a one-stop car owner service platform designed to provide you with authoritative national violation query, car insurance price calculation, trip management, claims service, and so on. There is an information leakage vulnerability in Sunshine Car Life APP, because the logi...

Arbitrary Password Reset Vulnerability in Paco Drive Android App

BaGoDrive is an O2O online and offline taxi application based on LBS geographical location developed by Jiangsu Xunzhi Network Technology Co. There is an arbitrary password reset vulnerability in the BaGeDrivingTo Android app, which allows attackers to reset the password by using the other party'...

Samsung Account Information Disclosure Vulnerability

Samsung account is a mobile client from Samsung South Korea that allows users to experience Samsung services. With Samsung account mobile, you can enjoy more functional features such as cell phone location, cell phone tracking and so on. Samsung Account suffers from an information disclosure...

SQL injection vulnerability in the cell_phone parameter of SMiCMS government website system

SMi CMS Government Website System is a website system for governments, schools and groups. There is a SQL injection vulnerability in the cellphone parameter of SMiCMS government website system, because the parameters of the registration page are not sufficiently filtered, an attacker can exploit...

Cisco IP Phone 8851 Denial of Service Vulnerability

Cisco IP Phone 8851 is a telephone product from Cisco USA that provides video and VoIP communication features. A denial of service vulnerability exists in the Session Initiation Protocol SIP implementation in the Cisco IP Phone 8851 version 11.00.1. A remote attacker could exploit this...

CVE-2017-6630

A vulnerability in the Session Initiation Protocol SIP implementation of Cisco IP Phone 8851 11.00.1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to an abnormal SIP message. An attacker could exploit this vulnerability by...

CVE-2017-6630

CVE-2017-6630 affects Cisco IP Phone 8851 with firmware 11.0(0.1). A remote, unauthenticated attacker can trigger a denial of service by sending manipulated CANCEL SIP messages due to an abnormal SIP handling in the device. Multiple sources (Cisco advisory Cisco-SA-20170517-sip, Tenable plugin, a...

Cisco IP Phone 8851 Session Initiation Protocol DoS Vulnerability (cisco-sa-20170517-sip)

A vulnerability in the Session Initiation Protocol SIP implementation of Cisco IP Phone 8851 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

Cisco IP Phone 8851 Session Initiation Protocol Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP implementation of Cisco IP Phone 8851 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to an abnormal SIP message. An attacker could exploit this vulnerability by manipulatin...