4479 matches found
Local Police Listening Your Cell-Phone Without a Warrant
By now, everyone knows that the major federal agencies and big organisations like FBI, NSA and CIA are spying on you under their massive global surveillance programmes. But here's the Kicker: Your local police might be spying on your activities, too. According to the recent details published by t...
Apple iOS Sandbox Bypass Sensitive Information Disclosure Vulnerability (CNVD-2015-02305)
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An information disclosure vulnerability exists in Apple iOS Handling Third-Party App Sandbox, which allows attackers to exploit the vulnerability to maliciously access phone numbers or EMAIL contact...
Apple iOS Sandbox Bypass Sensitive Information Disclosure Vulnerability (CNVD-2015-02306)
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An information disclosure vulnerability exists in Apple iOS Handling Third-Party App Sandbox, which allows attackers to exploit the vulnerability to maliciously access phone numbers or EMAIL contact...
New Coalition Launches Fight Against Patriot Act Section 215
A broad group of civil-rights, technology and political groups from across the spectrum has developed a new initiative to advocate for the repeal of Section 215 of the USA PATRIOT Act, the part that provides the authority for the bulk collection of phone metadata and other information. The new...
Tech Companies, Privacy Advocates Call for NSA Reform
A group of technology companies, non-profits and privacy and human rights organizations have sent a letter to President Barack Obama, the director of national intelligence and a wide range of Congressional leaders, calling for an end to the bulk collection of phone metadata under Section 215 of t...
Cisco IP Phone exposed high-risk vulnerabilities can cause remote eavesdropping-vulnerability warning-the black bar safety net
Cisco small business phone the firmware of the exposed high-risk vulnerability, the attacker can the exploit monitor private telephone calls and remote dial telephone, and that a series of malicious acts does not require any authentication. Remote monitoring and makethe words The vulnerability,...
Cisco Small Business SPA300 and SPA500 Series IP Phones Unauthenticated Remote Dial Vulnerability
A vulnerability in the firmware of the Cisco Small Business SPA 300 and 500 series IP phones could allow an unauthenticated, remote attacker to listen to the audio stream of an IP phone. The vulnerability is due to improper authentication settings in the default configuration. An attacker could...
Jolla Phone URI Spoofing
-------------------------- NSOADV-2015-001 --------------------------- Jolla Phone tel URI Spoofing 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 111 111001 111111111 0 10 111...
Tencent's wechat is shaking vulnerability, the use of the phone number cause account lost can't get back in!-- Theory of of personal information security and protection-vulnerability warning-the black bar safety net
This article was written today at 2 p.m. much, did not immediately issued because the cock to the clouds first feedback about the cock always felt the clouds are very T, it is desirable to have an account, but the cock is too water, but did not pass the audit, it may present cock of the expressio...
Change to Lollipop Encryption Policy May Not Have Much Effect, Experts Say
Google has made a subtle, but important, shift in the requirements for Android handset makers, saying now that OEMs manufacturing phones that will run Lollipop do not have to enable disk encryption by default. This is a major change from the company’s stated position from just a few months ago, b...
Design/Logic Flaw
The IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as distributed in IBM Notes Traveler 9.0.1, does not properly restrict the number of executions of the automatic configuration option, which makes it easier for remote attackers to capture credentials b...
CVE-2014-8921
The vulnerability CVE-2014-8921 affects the IBM Notes Traveler Companion for Windows Phone (versions 1.0 and 1.1 prior to 201411010515, as distributed in IBM Notes Traveler 9.0.1). The issue is an improper restriction on the number of executions of the automatic configuration option, which could ...
SA-CONTRIB-2015-054 - SMS Framework - Cross Site Scripting (XSS)
SMS Framework module enables you to send and receive SMS messages from and into Drupal. The module doesn't sufficiently sanitize user supplied text in message previews, thereby exposing a reflected Cross Site Scripting vulnerability. An attacker could exploit this vulnerability by getting the...
LG On Screen Phone authentication bypass (CVE-2014-8757)
LG On Screen Phone authentication bypass vulnerability ------------------------------------------------------ SEARCH-LAB Ltd. discovered a serious security vulnerability in the On Screen Phone protocol used by LG Smart Phones. A malicious attacker is able to bypass the authentication phase of the...
LG On Screen Phone authentication bypass
Authentication is IP address based...
Cool the most secure phone s6 cool housekeeper password bypass-vulnerability warning-the black bar safety net
Bypass local password, the first thought is directly by opening the Activity to achieve, so the profile total of the Activity to view, find the following one can reset the cool housekeeper password Activity code area From the configuration point of view this Activity is not exported, without root...
Live off the mobile phone client xss comfortably into the background-bug warning-the black bar safety net
Brief description: Live off the mobile phone client sidexsscomfortably, you can log in the background Detailed description: 0x00 keywords code area Live off to find room Android App, user feedback, comfortably, the storage-typexss, the'" 0x02 process User feedback directly inserted into the !...
CVE-2014-8757
LG On-Screen Phone OSP before 4.3.010 allows remote attackers to bypass authorization via a crafted request...
CVE-2014-8757
LG On Screen Phone (OSP) before 4.3.010 is vulnerable to an authentication bypass via crafted requests. The issue is implemented in the OSP component listening on 0.0.0.0:8382, where an attacker on the same local network can bypass the confirmation dialog and gain full control of the phone withou...
