Android 4.4.2 Update Fixes Flash SMS DoS Vulnerability

Google has patched a previously disclosed issue in its Nexus line of phones that could have opened users up to a nasty series of SMS-based denial-of-service attacks. The company pushed the fix out alongside version 4.4.2 of Android on Monday to the Nexus 4, 5, 7 and 10 devices. According to...

PlaySMS SMS Gateway跨站请求伪造漏

Playsms是开源SMS管理系统。 PlaySMS SMS Gateway 0.9.9.2及其他版本没有正确验证用户的HTTP请求，在实现上存在安全漏洞，成功利用后可使攻击者更改管理员密码。 0 PlaySMS SMS Gateway 0.9.9.2 PlaySMS ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://playsms.sourceforge.net/ http://security-geeks.blogspot.dk/2013/12/playsms-0992-csrf.html...

PlaySms 0.9.9.2 - Cross-Site Request Forgery

Exploit Title : PlaySMS input type=submit class=button va...

Design/Logic Flaw

The Multimedia Messaging Centre MMSC in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection...

CVE-2013-7001

CVE-2013-7001 concerns NowSMS Now SMS & MMS Gateway prior to 2013.11.15. The MMSC may trigger a denial of service when processing a malformed MM1 message that is routed to a MM4 or MM7 connection. Affected component: Multimedia Messaging Centre (MMSC) in NowSMS gateway. Underlying cause: malforme...

CVE-2013-7000

CVE-2013-7000 affects the Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26. The vulnerability allows remote attackers to cause a denial of service by sending a malformed MM4 message over the MM4 connection, impacting availability. Affected component: MMSC in NowSMS. R...

Google Nexus Phones Vulnerable to SMS Denial-of-Service

Google is reportedly looking into a problem with the latest versions of Nexus smartphones that could force the devices to restart, lock or fail to connect to the Internet. All Galaxy Nexus, Nexus 4 and Nexus 5 devices that run Android 4.0 contain a flaw that can render the phones vulnerable to a...

Google Nexus phone vulnerable to SMS-based DOS attack

Google's Nexus Smartphones are vulnerable to SMS-based DOS attack, where an attacker can force it to restart, freeze, or lose network connection by sending a large number of special SMS messages to them. The vulnerability, discovered by Bogdan Alecu, a system administrator at Dutch IT services...

Google Nexus phone vulnerable to SMS-based DOS attack

None...

Huawei Datacard Information Disclosure Vulnerability

This module exploits an unauthenticated information disclosure vulnerability in Huawei SOHO routers. The module will gather information by accessing the /api pages where authentication is not required, allowing configuration changes as well as information disclosure, including any stored SMS...

Mobile Android banking Trojan Svpeng Adds Phishing Know-How

An Android banking Trojan known as Svpeng has added phishing capabilities to its arsenal, and researchers have spotted it attacking Russian banking clients in what is perceived to be a dry run before it is adapted for other countries. “Typically, however, cybercriminals first test-run a technolog...

Simple, but Critical vulnerability in Verizon Portal revealed users' SMS History

A Security researcher discovered a critical privacy vulnerability on Verizon Wireless's Web-based customer portal that allows anyone to download user's SMS History and Numbers of other users he communicated with. Back in August, researcher 'Cody Collier' found that a simple URL exploit could allo...

Simple Bug Exposed Verizon Wireless Users' SMS History

A security researcher discovered a simple vulnerability in Verizon Wireless’s Web-based customer portal that enabled anyone who knows a subscriber’s phone number to download that user’s SMS message history, including the numbers of the people he communicated with. The vulnerability, which has bee...

Simple, but Critical vulnerability in Verizon Portal revealed users' SMS History

A Security researcher discovered a critical privacy vulnerability on Verizon Wireless’s Web-based customer portal that allows anyone to download user’s SMS History and Numbers of other users he communicated with. Back in August, researcher 'Cody Collier' found that a simple URL exploit could allo...

Android WebView vulnerability allows hacker to install malicious apps

WebView is an essential component in Android and iOS. It enables applications to display content from online resources and simplifies task of performing a network request, parsing the data and rendering it. Today AVG Security expert reported a critical vulnerability in Android's WebView feature...

Android WebView vulnerability allows hacker to install malicious apps

WebView is an essential component in Android and iOS. It enables applications to display content from online resources and simplifies task of performing a network request, parsing the data and rendering it. Today AVG Security expert reported a critical vulnerability in Android's WebView feature...

Mobile Pwn2Own Offers $300k For Zero Days

It’s a good time to be a security researcher. If you have the time and talent to find vulnerabilities in widely deployed applications, there is a lot of money out there for the taking, and not just from the bug bounty programs and regular exploit buyers. The latest iteration of the Pwn2Own hackin...

NSA can access your data on Smartphones including iPhone, BlackBerry and Android devices

National Security Agency NSA has the capability to access a broad range of data on most Smartphones out there, including iPhone, BlackBerry, and Android devices, according to the documents provided by former US intelligence contractor Edward Snowden to the German news agency Der Spiegel report. A...

NSA can access your data on Smartphones including iPhone, BlackBerry and Android devices

National Security Agency NSA has the capability to access a broad range of data on most Smartphones out there, including iPhone, BlackBerry, and Android devices, according to the documents provided by former US intelligence contractor Edward Snowden to the German news agency Der Spiegel report. A...

Obad Trojan First to Spread Via Mobile Botnet

The keepers of the mobile Obad Trojan realize the window of opportunity they have to spread the malware on Android devices may be closing since the vulnerability the Trojan exploits has been patched in Android 4.3. That could explain why Kaspersky Lab researchers have spotted a recent spike in...