Security Advisory - Baidu WormHole Vulnerability in Huawei Mobile Phones

Preinstalled Baidu apps in certain Huawei mobile phones have the WormHole vulnerability. An attacker can exploit this vulnerability to read information about, modify data in, or take control over the affected mobile phones. Vulnerability ID: HWPSIRT-2015-10045 Huawei has released software updates...

CVE-2015-6391

Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service resource consumption and functionality loss via a large amount of network traffic, aka Bug ID CSCuh51331...

Code injection

Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service resource consumption and functionality loss via a large amount of network traffic, aka Bug ID CSCuh51331...

CVE-2015-6391

Cisco CVE-2015-6391 affects the Cisco Unified SIP Phone 3905. A remote attacker can cause a denial of service by sending a large amount of traffic, exploiting a device resource limitation (Bug CSCuh51331). The Cisco advisory states no software updates address this vulnerability and there are no w...

How to Root Windows Phone and Unlock the Bootloader to Install Custom ROMs

Yes, Now it is possible to unlock a Windows Lumia Phone for Root Access and run custom ROMs. Both Microsoft as well as Nokia have made Windows Lumia smartphones difficult to break into at a low-level by locking down their bootloaders, but a software hacker, who go by the name HeathCliff, has just...

Android Stagefright Exploit Code Released to Public

Joshua Drake, the researcher who found the so-called Stagefright vulnerability in Android, today released exploit code to the public, which he hopes will be used to test systems’ exposure to the flaw. The move comes more than a month after vulnerability details were released in August during...

Google Plans Monthly Security Updates for Nexus Phones

LAS VEGAS–Google is changing the way that it updates its Nexus Android phones and will now send out monthly over-the-air updates to users. The first update is being pushed out today, and the company said that other Android handset manufacturers are planning to follow suit and provide monthly...

Four Zero Days Disclosed in Internet Explorer

UPDATE–As if all of the vulnerabilities in Flash and Windows discovered in the Hacking Team document cache and the 193 bugs Oracle fixed last week weren’t enough for organizations to deal with, HP’s Zero Day Initiative has released four new zero days in Internet Explorer Mobile that can lead to...

Cisco 9900 Series IP Phones Denial of Service Vulnerability

Cisco 9900 Series IP Phones is a 9900 series IP phone product from Cisco USA. This product provides voice and video features. A denial of service vulnerability exists in the Cisco 9900 Series IP Phones, which stems from the program's failure to properly support the RTP protocol. A remote attacker...

CVE-2015-4226

The packet-storing feature on Cisco 9900 phones with firmware 9.32 does not properly support the RTP protocol, which allows remote attackers to cause a denial of service device hang by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976...

Code injection

The packet-storing feature on Cisco 9900 phones with firmware 9.32 does not properly support the RTP protocol, which allows remote attackers to cause a denial of service device hang by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976...

CVE-2015-4226

Cisco 9900 Series IP Phones (firmware 9.3(2)) contain a DoS vulnerability in the packet-storing feature due to improper RTP handling. An unauthenticated remote attacker can cause a device hang by sending malformed RTP packets after a call is answered. Impact is DoS with a network attack vector; r...

Cisco Unified IP Phones 9900 Series Denial of Service Vulnerability

A vulnerability in the packet storing capabilities of Cisco 9900 Series IP Phones could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to how the phone decoder handles certain real-time transport protocol RTP packets. An attacker...

Cisco UCS Central Software Security Vulnerabilities Patched

Cisco has patched a serious remote code execution vulnerability in its Unified Computing System UCS Central software, a data center platform that integrates processing, networking, storage and virtualization into one system. “An attacker could exploit this vulnerability by sending a crafted HTTP...

Caught on the web of any user of the password reset vulnerability-vulnerability warning-the black bar safety net

Phone reset password password reset operation is not associated with a specific phone number, the lead can be reset to any phone registration account password. 1. The following url returns a result, you can traverse all the mobile phones registered account: http://api1.fun.tv/ajax/getmobilevcode/...

Cisco small business phone the firmware of the exposed high-risk vulnerabilities attackers can listen to private phone calls-vulnerability warning-the black bar safety net

The vulnerabilityCVE-2 0 1 5-0 6 7 0in the presence of is actually because some Cisco IP Phone default configuration contains a number of inappropriate settings. It allows an attacker to the affected device sends a special XML request to control the device. In addition, the vulnerability can be...

Cisco Small Business IP Phones Open to Remote Eavesdropping

Cisco is warning customers about several vulnerabilities in some of its IP phones that can allow an attacker to listen in on users’ conversations. The bug affects the Cisco SPA 300 and 500 Series IP phones. Cisco had confirmed the vulnerabilities, which were discovered by Chris Watts, a researche...

Cisco IP Phones Vulnerable To Remote Eavesdropping

A critical vulnerability in the firmware of Cisco small business phones lets an unauthenticated attacker to remotely eavesdrop on private conversation and make phone calls from vulnerable devices without needing to authenticate, Cisco warned. LISTEN AND MAKE PHONE CALLS REMOTELY The vulnerability...

Cisco Small Business IP phones SPA 300 and SPA 500 Information Disclosure Vulnerabilities

Cisco Small Business IP phones SPA 300 and SPA 500 are the SPA 300 and SPA 500 series of IP VoIP products from Cisco. A security vulnerability exists in the default configuration of Cisco Small Business IP phones SPA 300 version 7.5.5 and SPA 500 version 7.5.5. Because the program fails to set up...

CVE-2015-0670

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482...