4478 matches found
Race condition
Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the locked state, and dial the telephone numbers in arbitrary Contacts entries, by visiting the Contacts pane...
CVE-2013-5164
Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the locked state, and dial the telephone numbers in arbitrary Contacts entries, by visiting the Contacts pane...
CVE-2013-5162
Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass the passcode-failure disabled state by leveraging certain incorrect visibility of the passcode-entry view after use of the Phone app...
Simple Bug Exposed Verizon Wireless Users' SMS History
A security researcher discovered a simple vulnerability in Verizon Wireless’s Web-based customer portal that enabled anyone who knows a subscriber’s phone number to download that user’s SMS message history, including the numbers of the people he communicated with. The vulnerability, which has bee...
FISC Court renews the Permission to collect Telephony Metadata again
The Foreign Intelligence Surveillance Court has once again has renewed the permission to the U.S. government for a controversial program to collect the telephony metadata from American phone companies. The News that the NSA collects bulk phone call metadata including phone numbers, call times and...
Cisco Unified IP Phone 8900/9900 Series Crafted SDP Packet Vulnerability
A vulnerability in the SDP negotiation logic of the Cisco Cisco Unified IP Phone 9951, Cisco Unified IP Phone 9971 and the Cisco Unified IP Phone 8961 could allow an unauthenticated, remote attacker to cause the phone to reboot. The vulnerability is due to improper processing of crafted SDP...
Cisco Unity Detection
The remote host has Cisco Unity installed. Cisco Unity is communication integration software that bridges phone systems to email. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70169; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...
Alexander: 'FISA is the Key to Connecting the Dots'
WASHINGTON–Faced with trying to accomplish its mission in an environment that suddenly has become quite hostile and inquisitive about its methods, the National Security Agency is becoming more and more public about the challenges that lie ahead and how the agency plans to address them. One of the...
Android Device Manager allows user to Lock, Wipe and Locate device remotely
If you lose your device, Google lets you secure it instantly from afar through Android Device Manager, that let you locate and remotely wipe your phones and tablets. The latest update to Android Device Manager enables remote password locking, overrides the built-in Pattern, PIN code, Face unlock ...
Cisco Unified IP Phones Privilege Escalation (cisco-sa-20130109-uipphone)
According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device has a local privilege escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges. Successful exploits could result in the complete compromise o...
CVE-2013-5156
The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon...
Design/Logic Flaw
The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon...
CVE-2013-5147
Passcode Lock in Apple iOS before 7 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging a race condition involving phone calls and ejection of a SIM card...
CVE-2013-5156
CVE-2013-5156 affects Apple iOS before 7, where the Telephony subsystem does not require API conformity for access to telephony-daemon interfaces. A crafted app can bypass restrictions and send direct requests to the daemon, potentially causing interference with telephony functionality. The Apple...
CVE-2013-5156
The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon...
FISC: No Phone Company Ever Challenged Metadata Collection Orders
A newly declassified opinion from the Foreign Intelligence Surveillance Court from this summer shows the court’s interpretation of the controversial Section 215 of the USA PATRIOT Act that’s used to justify the National Security Agency’s bulk telephone metadata collections, and reveals that none ...
Millet mobile phone the album encrypted can bypass the access-vulnerability warning-the black bar safety net
Brief description: Album encrypted can bypass the access Detailed description: Use the phone comes with encryption album encrypted by the system comes with the album view mode can be a normal display require a password for access, but through the micro-channel, QQ, etc. program called photo...
How I Got Here: Marc Maiffret
Dennis Fisher talks with Marc Maiffret about his teenage years as a phone phreaker and BBS denizen, the early years of the vulnerability research scene, the Code Red worm and its aftermath and how the security scene has changed in the past 15 years. Download: 10maiffret.mp3...