Security Advisory - Multiple Vulnerabilities in Huawei Smart Phones

Huawei smart phones have two authentication bypass vulnerabilities. An attacker may tricks users into installing a malicious app, and the app could exploit these vulnerabilities to bypass the permission checks, controlling partial module functions Vulnerability ID: HWPSIRT-2016-03013, and deletin...

Telisca IPS Lock 2 Remote Phone Lock

a vulnerability in IPS LOCK , below is the description : Exploit Title: TELISCA IPS LOCK ABUSE Date: 13/01/2016 Software Link: http://www.telisca.com/products/ip-phone-apps/ipslock/ Exploit Author: Fakhir Karim Reda Contact: [email protected] Metasploit module :...

Encrypted Smartphone Network Seized by Dutch Police for Criminal Investigation

On Tuesday, the Dutch Police arrested a 36-year-old man, Danny Manupassa, on suspicion of money laundering and involvement in selling encrypted smartphones to criminals. Manupassa owns a company called Ennetcom, which provides customized Blackberry Phones with the secure PGP-encrypted network...

New Exploit to 'Hack Android Phones Remotely' threatens Millions of Devices

Attention Android users! Millions of Android devices are vulnerable to hackers and intelligence agencies once again – Thanks to a newly disclosed Android Stagefright Exploit. Yes, Android Stagefright vulnerability is Back… …and this time, the Stagefright exploit allows an attacker to hack Android...

The Linux kernel mention the right vulnerability analysis and the use of CVE-2 0 1 6-0 7 2 8-a vulnerability warning-the black bar safety net

Security research team Perception Point found a Linux system the kernel exists in a high-risk level of the local privilege escalation 0day vulnerabilities, numbered CVE-2 0 1 6-0 7 2 8 in. There are currently more than 6 6% of Android phones and 1 0 0 0 million Linux PCS and servers are affected ...

Huawei Smart Phones Denial of Service Vulnerability

Huawei Smart Phones 7 is a smartphone from the Chinese company Huawei. A security vulnerability exists in Huawei Smart Phones 7. A local attacker could exploit the vulnerability to crash the system...

Security Advisory - DoS Vulnerability in Graphics Driver of Huawei Smart Phones

There is a Denial of Service DoS vulnerability in Graphics driver of some Huawei smart phones. An attacker may trick a user into installing a malicious application and the application can make semaphore deadlock issue, which causes the system to crash. Vulnerability ID: HWPSIRT-2015-12015 This...

Heap overflow

Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 befo...

CVE-2015-8231

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service device restart via unspecified packets...

CVE-2015-8230

Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service memory consumption and restart via a large number of crafted ARP packets...

Code injection

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service device restart via unspecified packets...

CVE-2015-8231

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service device restart via unspecified packets...

CVE-2015-8231

Huawei eSpace 7910/7950 IP phones running pre-V200R002C00SPC800 are affected. A remote attacker with an established session can trigger a denial-of-service (device restart) by sending unspecified packets. The underlying root cause and exact vulnerable component are not detailed in the provided do...

CVE-2015-8230

CVE-2015-8230 affects Huawei eSpace 8950 IP phones (before V200R003C00SPC300). The issue is a memory leak caused by handling crafted ARP packets, leading to memory exhaustion and device restart (DoS). Public descriptions confirm the vulnerability exists in the eSpace 8950 line and that Huawei rel...

Security Advisory - DoS Vulnerabilities in Driver of Huawei Smart Phones

There is a Denial of Service DoS vulnerability in ION driver and Maximsmartpadev driver in some Huawei smart phones respectively. An attacker may trick a user into installing a malicious application and the application can access invalid address of driver to crash the system. Vulnerability ID:...

Security Advisory - Multiple Security Vulnerabilities in Driver of Huawei Smart Phones

There are multiple security vulnerabilities in driver of some Huawei smart phones. There are two interface access control vulnerabilities in Graphics driver. An attacker may trick a user into installing a malicious application and application can exploit the vulnerability to crash the system or...

CVE-2015-6403

The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400...

Polycom VVX-Series Business Media Phones - Path Traversal Vulnerability

Exploit for hardware platform in category web applications Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects-- Polycom...

Polycom VVX-Series Business Media Phones - Directory Traversal

Polycom VVX-Series Business Media Phones - Directory Traversal Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects--...

Multiple Cisco IP Phones Firmware Image Upload Vulnerability

A vulnerability in the TFTP implementation of the Cisco Small Business SPA30X and SPA50X IP Phones could allow an unauthenticated, local attacker to load arbitrary firmware images onto the affected device. The vulnerability is due to insufficient file integrity checks of the firmware image. An...