Code injection

The Cisco Unified IP Phone 8945 with software 9.32 allows remote attackers to cause a denial of service device hang via a malformed PNG file, aka Bug ID CSCud04270...

CVE-2013-3468

The Cisco Unified IP Phone 8945 with software 9.32 allows remote attackers to cause a denial of service device hang via a malformed PNG file, aka Bug ID CSCud04270...

CVE-2013-3468

Cisco Unified IP Phone 8945 (software 9.3(2)) is affected by CVE-2013-3468 due to incorrect processing of malformed PNG images, which can remotely trigger a device hang/lockup (denial of service). Evidence from Cisco advisory Cisco-SA-20130828-CVE-2013-3468 and multiple third-party sources confir...

Cisco Unified IP Phone 8945 Crafted PNG Image Lockup Vulnerability

A vulnerability in PNG image processing of the Cisco Unified IP Phone 8945 running software version 9.32 could allow an unauthenticated, remote attacker to cause the phone to lock up. The vulnerability is due to incorrect processing of malformed PNG images. An attacker could exploit this...

Adobe Photo Loader Malware Posts Craigslist Spam

An attacker is going to a lot of trouble to post spam messages to Craigslist. Researchers at Solera Networks have come across an attack where malware is using compromised machines to post poorly worded ads for an Android application marketed at parents for the purposes of monitoring the activitie...

Phone Hack Could Block Messages, Calls on GSM Networks

By tweaking the firmware on certain kinds of phones, a hacker could make it so other phones in the area are unable to receive incoming calls or SMS messages, according to research presented at the USENIX Security Symposium earlier this month. The hack involves modifying the baseband processor on...

Microsoft Windows Phone PEAP-MS-CHAPv2身份验证协议安全漏洞

BUGTRAQ ID: 61592 Microsoft Windows Phone是微软开发的系列移动设备操作系统。 Windows Phone 8、Windows Phone 7.8用于WPA2无线身份验证的PEAP-MS-CHAPv2中存在安全漏洞，攻击者可利用此漏洞获取目标设备的敏感信息。要利用此漏洞，攻击者控制的系统需要充当已知的Wi-Fi访问点，使目标设备自动与该访问点进行身份验证，攻击者然后可以截获受害者的加密域证书，再利用PEAP-MS-CHAPv2协议内的漏洞获取网络资源。 0 Microsoft Windows Phone 8 Microsoft Windows Pho...

Hackers can steal Windows Phone passwords using Wi-Fi vulnerability

Microsoft has warned that a vulnerability in Windows Phone operating systems could allow hackers to access your login credentials. The vulnerability resides in a Wi-Fi authentication scheme known as PEAP-MS-CHAPv2, which Windows Phones use to access wireless networks protected by version 2 of the...

Fedora Update for twinkle FEDORA-2013-13018

Check for the Version of twinkle OpenVAS Vulnerability Test Fedora Update for twinkle FEDORA-2013-13018 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Phone Drive v3.0.3 iOS - Multiple Critical Vulnerabilities

Document Title: =============== Phone Drive v3.0.3 iOS - Multiple Critical Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1037 Release Date: ============= 2013-07-30 Vulnerability Laboratory ID VL-ID: ====================================...

Phone Drive v3.0.3 iOS - Multiple Critical Vulnerabilities

Document Title: =============== Phone Drive v3.0.3 iOS - Multiple Critical Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1037 Release Date: ============= 2013-07-30 Vulnerability Laboratory ID VL-ID: ====================================...

The use of SMS hijacking of Facebook accounts-vulnerability warning-the black bar safety net

This article will demonstrate a simple bug. Exploit this vulnerability without user interaction, you can get any Facebook account full control. Please see below. Facebook allows you to be your own phone number and the account number associated with it. This allows you via SMS to receive update...

[SECURITY] Fedora 17 Update: twinkle-1.4.2-19.fc17.1

Twinkle is a SIP based soft phone for making telephone calls over IP networ ks...

[SECURITY] Fedora 18 Update: twinkle-1.4.2-19.fc18.1

Twinkle is a SIP based soft phone for making telephone calls over IP networ ks...

Appropriations Amendment Threatens to Cut Funding for NSA Collection Program

A small group of Congressmen is trying to cut off the funding for the NSA’s widespread collection of phone and Internet records under the “business records” collection provision of the Foreign Intelligence Surveillance Act. The provision in FISA that enables law enforcement agencies to get access...

Threat Outbreak Alert: Fake Phone Message Notification Email Messages on July 19, 2013

Severity Alert ID: 30157 First Published: 2013 July 22 16:14 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on July 19, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES...

FISA Court renews NSA surveillance programs exposed by Snowden

The secret Foreign Intelligence Surveillance Court FISA gave the green light to the Obama administration by renewing the government's authority Friday to continue the collection of millions of Americans' telephone records. The order by the Foreign Intelligence Surveillance Court has been in place...

Cisco 9900 Series Phone Arbitrary File Download Vulnerability

A vulnerability in the Serviceability servlet of fourth-generation Cisco IP phones could allow an unauthenticated, remote attacker to download arbitrary files from the phone's file system. The vulnerability is due to incomplete filtering of path values. An attacker could exploit this vulnerabilit...

EFF, Eclectic Group of Organizations Sue NSA Over Data Collection

If politics makes strange bedfellows, as the saying goes, wholesale government surveillance takes that to an entirely new level. The clearest evidence yet of the broad and diverse set of groups opposed to the NSA’s domestic spying programs came Tuesday when the EFF said that is representing a...

Facebook Bug Bounty #8 - Multiple Vulnerabilities

Document Title: =============== Facebook Bug Bounty 8 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=993 Release Date: ============= 2013-07-06 Vulnerability Laboratory ID VL-ID: ==================================== 993 Common...