CVE-2015-1171

CVE-2015-1171 affects GSM SIM Utility (aka SIM Card Editor) 6.6. The flaw is a stack-based buffer overflow triggered by a long entry in a .sms file, enabling remote code execution. Public materials in the Connected documents include an in-depth exploit description and sample exploit code (e.g., E...

Code injection

HP Systems Insight Manager SIM before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2015-5404

CVE-2015-5404 affects HP Systems Insight Manager (SIM) before 7.5.0, used in HP Matrix Operating Environment before 7.5.0. An attacker could remotely obtain sensitive information or modify data via unspecified vectors. HP issued remediation in the HP Matrix Operating Environment 7.5.0 release and...

CVE-2015-2139

HP Matrix Operating Environment (MEO) and HP SIM prior to 7.5.0 are affected by CVE-2015-2139. The HP Security Bulletin HPSBMU03409 rev.1 states that SIM, SMH, VCA, VCRM, and related components shipped with MEO

CVE-2015-2140

CVE-2015-2140 affects HP Matrix Operating Environment components prior to version 7.5.0, including HP Systems Insight Manager (SIM) before 7.5.0. The HP bulletin notes that remote authenticated attackers could obtain sensitive information or modify data via unspecified vectors. The vulnerability ...

CVE-2015-5402

CVE-2015-5402 affects HP Matrix Operating Environment via HP Systems Insight Manager (SIM) before 7.5.0 and related components; local users can gain privileges to access sensitive information, modify data, or cause a denial of service. The provided documents do not specify exploitation vectors. H...

CVE-2015-5403

CVE-2015-5403 affects HP Matrix Operating Environment components (HP SIM before 7.5.0; SIM alongside SMH, VCA, VCRM, Insight Orchestration, VCEM) with HP Matrix OS versions prior to 7.5.0. The vulnerability enables remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2015-5405

HP SIM (HP Systems Insight Manager) before 7.5.0, used in HP Matrix Operating Environment before 7.5.0, is vulnerable to CVE-2015-5405. The issue allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors. Remediation per H...

CVE-2015-3726

The Telephony subsystem in Apple iOS before 8.4 allows physically proximate attackers to execute arbitrary code via a crafted 1 SIM or 2 UIM card...

CVE-2015-3726

The Telephony subsystem in Apple iOS before 8.4 allows physically proximate attackers to execute arbitrary code via a crafted 1 SIM or 2 UIM card...

CVE-2015-3726

The CVE-2015-3726 vulnerability affects the Telephony subsystem of Apple iOS prior to 8.4. It allows physically proximate attackers to execute arbitrary code through crafted SIM/UIM payloads by exploiting multiple input validation issues in parsing SIM/UIM data. The issue is specific to the Telep...

Apple iOS 8.4 and OS X 10.10.4 fix vulnerabilities at a glance-vulnerability warning-the black bar safety net

Yesterday Apple released the latest iOS 8.4 and Mac OS X 10.10.4, the new version of the system contains a large number of security patches, fixing a remote code execution vulnerability, China certificate trust policy and other security issues. iOS 8.4 bug fixes list 1, iOS 8. 4 version of the...

Apple iOS Malicious SIM Input Verification Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS parses SIM/UIM loads in the presence of input validation, allowing attackers to exploit the vulnerability to execute arbitrary code using a malicious SIM card...

Apple Patches Dozens of Flaws in iOS 8.4, OS X 10.10.4

Apple has released new versions of iOS and OS X, both of which include a significant number of security patches, several for bugs that can lead to remote code execution and other serious issues. Version 8.4 of iOS contains fixes for more than 30 security vulnerabilities, including bugs in the iOS...

Gemalto Officials Say SIM Infrastructure Not Compromised

Despite leaked documents from the NSA showing otherwise, officials at Gemalto on Wednesday said the company has found no evidence that its SIM card infrastructure was compromised several years ago by the NSA and GCHQ. The company identified a handful of what it called sophisticated attacks in the...

Gemalto: 'SIM Products Are Secure'

Gemalto officials say that while they are still in the process of investigating whether the company was compromised by the NSA and GCHQ to access the encryption keys for its SIM cards, they say they believe their products and platforms are secure. In a statement issued Monday, Gemalto officials...

NSA Stole Millions Of SIM Card Encryption Keys To Gather Private Data

Edward Snowden is back with one of the biggest revelations about the government's widespread surveillance program. The US National Security Agency NSA and British counterpart Government Communications Headquarters GCHQ hacked into the networks of the world's biggest SIM card manufacturer, accordi...

BMW security vulnerability details: the ancient Bole to identify a good horse, today there are hackers escapement BMW-vulnerability warning-the black bar safety net

ADAC whole German automobile club want to in-depth understanding of embedded mobile network modem of the car to the manufacturer to send data. C't German computer technology magazine for the ADAC introduced a security expert. The expert in-depth analysis of the BMW ConnectedDrive system the data...

Mobile Vikings: Approve topup method by sender of this method

user A has a sim and send auth request to user B user B accepted it and decide to add to shared sim own topup method user B goes to https://mobilevikings.be/en/account/easypay/auto-sms-topup/ - select shared sim card and select method in section "Choose a payment method" and submit form. User A g...

Mobile Vikings: Username and sim id enum

Look at this url GET request https://mobilevikings.be/en/sims/authorization/remove/admin/1036358/ - looks good - admin user detected https://mobilevikings.be/en/sims/authorization/remove/lloyd/1036358/ - looks good - lloyd user detected...