Gas Pump Skimmer Sends Card Data Via Text

Skimming devices that crooks install inside fuel station gas pumps frequently rely on an embedded Bluetooth component allowing thieves to collect stolen credit card data from the pumps wirelessly with any mobile device. The downside of this approach is that Bluetooth-based skimmers can be detecte...

GSM SIM Editor 5.15 Buffer Overflow

A buffer overflow vulnerability exists in GSM SIM Editor 5.15. The vulnerability is due to the way GSM SIM Editor handles objects in memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file which allows an attacker to execute arbitrary...

SIM Info/USSD/Recharge Offers - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SIM Info/USSD/Recharge Offers published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to spoof users by leveraging knowledge of "traffic records."...

Securing a travel iPhone

These are dry notes I took in the process of setting up a burner iPhone SE as a secure travel device. They are roughly in setup order. I believe iOS to be the most secure platform one can use at this time, but there are a lot of switches and knobs. This list optimizes for security versus...

CVE-2016-2030

HPE Systems Insight Manager SIM before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2022...

CVE-2016-2020

HPE Systems Insight Manager SIM before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030...

CVE-2016-2018

HPE Systems Insight Manager SIM before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-2017

HPE Systems Insight Manager SIM before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030...

Code injection

HPE Systems Insight Manager SIM before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2022...

Design/Logic Flaw

HPE Systems Insight Manager SIM before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors...

Code injection

HPE Systems Insight Manager SIM before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2022, and CVE-2016-2030...

Code injection

HPE Systems Insight Manager SIM before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2030...

CVE-2016-2022

CVE-2016-2022 applies to HPE Systems Insight Manager (SIM) prior to 7.5.1, where remote authenticated users can obtain sensitive information or modify data via unspecified vectors. This entry is linked to the HPE SIM family and is considered a distinct vulnerability from CVE-2016-2017, CVE-2016-2...

CVE-2016-2020

Technical details about CVE-2016-2020 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2016-4366

HPE Systems Insight Manager (SIM) prior to 7.5.1 is affected by CVE-2016-4366, allowing remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors. Affected product is HPE SIM; the root cause is not explicitly detailed in the provided docum...

CVE-2016-2021

CVE-2016-2021 affects HPE Systems Insight Manager (SIM) prior to 7.5.1. The vulnerability allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. Other CVEs in the same family (CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2022, CVE-2016-2...

CVE-2016-2017

CVE-2016-2017 corresponds to a padding-oracle vulnerability in CBC mode decryption affecting OpenSSL. The IBM Aspera bulletin itemizes CVE-2016-2017 within its OpenSSL-related entries and states that OpenSSL versions before 1.0.1t and before 1.0.2h are vulnerable, enabling an attacker to decrypt ...

CVE-2016-2030

Technical details about CVE-2016-2030 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specific affected products, exploit vectors, or remediation are described here.

CVE-2016-2019

Technical details for CVE-2016-2019 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories or bibliographic sources to confirm affected versions, vectors, impact, and remediation.