Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit

Exploit for hardware platform in category remote exploits ================================================== Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit ================================================== Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XS...

D-Link VoIP Phone Adapter - Cross-Site Scripting / Cross-Site Request Forgery Remote Firmware Overwrite

D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be used for csrf bypass:...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery

Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 milw0rm.com 2009-01-29...

PT-2009-2916 · Microsoft · Windows Mobile +1

Name of the Vulnerable Software and Affected Versions: Windows Mobile versions 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition Windows Mobile 6 Professional Description: A directory traversal issue in the OBEX FTP Service of the Microsoft Bluetooth stack allows remote authenticated users to...

CVE-2008-4444

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

Code injection

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

CVE-2008-4444

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

CVE-2008-4444

CVE-2008-4444 — Cisco SIP phones RTP header parsing DoS/risk of code execution Affected hardware/software: Cisco Unified IP Phone models 7960G and 7940G with firmware P0S3-08-9-00 and possibly earlier versions up to 8.10. Vulnerability: Improper parsing of certain RTP headers can be exploited by ...

Cisco Unified IP Phone 7960G and 7940G (SIP) RTP Header Vulnerability

Title: ------ Cisco Unified IP Phone 7960G and 7940G SIP RTP Header Vulnerability Summary: -------- The Cisco Unified IP Phone 7960G and 7940G SIP do not correctly parse some malformed RTP headers leading to a deterministic denial of service Assigned CVE: ------------- CVE-2008-4444 Details:...

Cisco Unified IP Phone 7960G and 7940G RTP远程拒绝服务漏洞

BUGTRAQ ID: 33264 CVE ID：CVE-2008-4444 CNCVE ID：CNCVE-20084444 Cisco Unified IP Phone是思科的统一IP电话解决方案。 Cisco Unified IP Phone 7960G和7940G不正确解析部分畸形RTP头字段数据，远程攻击者可以利用漏洞对电话机进行拒绝服务攻击。 SIP协议用于在电话中设置呼叫，一旦呼叫建立，媒体内容由RTP协议承接，远程攻击者可以发送特殊构建的RTP报文时电话重启。 Cisco Unified IP Phone 7960G Cisco Unified IP Phone 7940G...

CVE-2008-5826

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...

CVE-2008-5827

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware automatically installs software upon completing the download of a JAR file, which makes it easier for remote attackers to execute arbitrary code via a crafted URI record in an NDEF tag...

Nokia S60 SMSMMS (Curse of Silence) - Denial of Service

Nokia S60 SMSMMS Curse of Silence - Denial of Service Vulnerability Advisory ====================== Remote SMS/MMS Denial of Service - "Curse Of Silence" for Nokia S60 phones URL === https://berlin.ccc.de/tobias/cos/s60-curse-of-silence-advisory.txt Video =====...

Design/Logic Flaw

The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physically proximate attackers to leverage the emergency-call ability of locked devices to make a phone call to an arbitrary number...

Design/Logic Flaw

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new applications, which allows remote attackers to make arbitrary phone calls via a crafted HTML document...

CVE-2008-4228

The CVE-2008-4228 issue affects Apple iPhone OS versions 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1. A design/logic flaw in the Passcode Lock feature lets physically proximate attackers exploit the device’s Emergency Call ability to place a call to an arbitrary number while the device is locked...

CVE-2008-4233

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new applications, which allows remote attackers to make arbitrary phone calls via a crafted HTML document...

CVE-2008-4233

The CVE-2008-4233 entry affects Safari in Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1, where the call-approval dialog is not isolated from the process launching new applications. This allows a crafted HTML document to cause remote phones calls. Exploitation details are not provid...

PT-2008-5526 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Safari in Apple iPhone OS versions 1.0 through 2.1 Safari in Apple iPhone OS for iPod touch versions 1.1 through 2.1 Description: The issue allows remote attackers to make arbitrary phone calls via a crafted HTML document because Safari does...

CVE-2008-4999

Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce...