Security Advisory - Input Check Vulnerability in Huawei Smart Phone

There is a vulnerability in a Huawei smart phone that does not validate input parameter. The attacker tricks the user to install a malicious application to obtain system or camera privilege and then can exploit the vulnerability to make the product system panic. Vulnerability ID: HWPSIRT-2015-110...

Security Advisory - Integer Overflowing Vulnerability in Huawei Smart Phone

An integer overflowing vulnerability exists in a Huawei smart phone. The attacker tricks the user to install a malicious application to obtain system or camera privilege and exploit the vulnerability to obtain the root privilege. Vulnerability ID: HWPSIRT-2015-11025 This vulnerability has been...

CVE-2015-7946

Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1...

Security Advisory - Two DoS Vulnerabilities in the HIFI Driver of Huawei Smart Phone

Some Huawei smart phones have two DoS Denial of Service security vulnerabilities in the HIFI driver. An attacker may trick a user into installing a malicious application and use the application to input null pointer as parameter, which can reboot the system. Vulnerability ID: HWPSIRT-2015-10038 a...

Cisco Unified SIP Phone 3905 Series Phones Remote Denial of Service Vulnerability

The Cisco Unified SIP Phone 3905 is a SIP phone device. A security vulnerability exists in the Cisco Unified SIP Phone 3905 that allows a remote user to submit a specially crafted mass communication to the target device to cause the device to stop responding...

Cisco SIP Phone 3905 Resource Limitation Denial of Service Vulnerability

A vulnerability in the Cisco Unified SIP Phone 3905 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a resource limitation of the device. An attacker could exploit this vulnerability by sending large...

Today NSA has Stopped its Bulk Phone Surveillance Program

Rejoice! From this morning, you can call freely to anyone, talk anything without any fear of being spied by the United States National Security Agency NSA, as the agency is not allowed to collect bulk phone records. Until now we all are aware of the NSA's bulk phone surveillance program – thanks ...

How to Root Windows Phone and Unlock the Bootloader to Install Custom ROMs

Yes, Now it is possible to unlock a Windows Lumia Phone for Root Access and run custom ROMs. Both Microsoft as well as Nokia have made Windows Lumia smartphones difficult to break into at a low-level by locking down their bootloaders, but a software hacker, who go by the name HeathCliff, has just...

Huawei eSpace 8950 IP Phone拒绝服务漏洞

No description provided by source...

Huawei eSpace 8950 IP Phone Denial of Service Vulnerability

Huawei eSpace 8950 is an intelligent video phone product from Huawei, China. A denial of service vulnerability exists in Huawei eSpace 8950. An attacker can exploit this vulnerability to cause the program to deny service to legitimate users...

Security Advisory - DoS Vulnerability in Huawei eSpace 8950 IP Phone

When Huawei eSpace 8950 IP phone receive some type of malicious ARP packets, memory leak may occur on the network interface card. When the memory is overloaded by such packets, the IP phone restarts Vulnerability ID: HWPSIRT-2015-08041. This vulnerability has been assigned Common Vulnerabilities...

AndroidVTS: Android cell phone vulnerabilities the defect detection App-vulnerability warning-the black bar safety net

Android users now have a light weight cell phone vulnerabilities the defect inspection tool to help users check their phone if there is a corresponding vulnerability. The tool is called Android VTS Vulnerability Test Suite, is Nownature released an app of the application tool. Android VTS is base...

iOS then exposed a major BUG, a hacker can monitor the iPhone phone and SMS-vulnerability warning-the black bar safety net

Apple each time you upgrade the iOS system will have a lot of BUGS need to be fixed, but some of the content irrelevant, but there are also very awsome. For example, recently a new vulnerability, hackers can take vulnerability to remotely control and monitor your iPhone. According to Zerodium tea...

Samsung Galaxy S6 Directory Traversal Vulnerability

The Samsung Galaxy S6 is a smartphone released by the South Korean company Samsung. The Samsung Galaxy S6 failed to adequately filter user-submitted input, allowing a remote attacker to send requests containing directory traversal characters to read arbitrary system files...

FBI Deputy Director's Email Hacked by Teenager Who Hacked CIA Chief

The same group of teenage hackers that hacked the AOL email account of the CIA director John Brennan two weeks ago has now hacked into AOL email accounts of the FBI Deputy Director, Mark Giuliano and his wife. Yesterday, Cracka, a member of the teenage hacktivist group known as 'Crackas With...

Security Advisory - Heap Overflow Vulnerability in the HIFI Driver of Huawei Smart Phone

Some Huawei smart phones have a heap overflow security vulnerability in the HIFI driver. An attacker may trick a user into installing a malicious application and use the application to read and modify memory, which can reboot the system or cause permission escalation. Vulnerability ID:...

High school Student Hacked Into CIA Director's Personal Email Account

A self-described teenage hacker has claimed to have hacked into personal AOL email account of Central Intelligence Agency CIA Director John Brennan and swiped sensitive top-secret data. It's Really a major embarrassment for Brennan as well as the CIA. The hacker, who describes himself as an...

Whisper: SMS Invite Form Abuse

whisper.sh fails to protect the invite form from abuse from attackers. If a malicious individual wants to abuse this functionality, they could send repeated/automated requests to the same phone number or range of phone numbers that do no actually belong to himself. This would result in lots of...

Android 5.0 screen recording Vulnerability, CVE-2 0 1 5-3 8 7 8 threat early warning-vulnerability warning-the black bar safety net

The first Chapter exploits the principles of One, Android 5.0 new features Android 5.0 added screen recording interface, no special permissions, using the following system APIS to realize screen recording function: ! To initiate a recording request, the system POPs up the following message box...

Souq.com: reflected xss on search bar (uae.souq.com)

the xss is executed in android phone or you can download user-agent switcher for google chrome then click Current: Android Handset to reproduce this bug as you see in pic 2.PNG steps: 1 go to http://uae.souq.com 2 put this payload on search bar : xss'+alert1+' 3the payload xss is executed 4 this...