National Security Letter Attachment Details

While the Snowden documents have demystified the intelligence community’s hacking abilities, few specifics are known about National Security Letters, law enforcement’s most powerful tool to compel telecommunications and Internet service providers to turn over a broad scope of user data, and which...

A comprehensive study of Huawei 3G routers - XSS, CSRF, DoS, unauthenticated firmware update, RCE

Hello, Please find a text-only version below sent to security mailing-lists. The html version on analysing the vulnerabilities in Huawei 3G routers is posted here: https://pierrekim.github.io/blog/2015-10-07-Huawei-routers-vulnerable-to-multiple-threats.html === text-version of the advisory ===...

The social security system, The exposed proximal 2 0 0 vulnerabilities, a hacker can obtain sensitive information-vulnerability warning-the black bar safety net

In recent years, because of the leakage of personal information causes of telecommunications fraud, crooks know of the victims unit, name, ID number, level of income. The social security system vulnerability to cause the leakage of personal information, may be one of the sources. 2 0 1 3 year to...

American telecommunications giant Verizon aeration have significant security vulnerabilities, leakage of customer information-vulnerability warning-the black bar safety net

The United States largest wireless communications provider Verizon to 4 4 billion USD acquisition of Aol AOL message Board this week to foreign media news headlines. However, BuzzFeed's latest report shows that Verizon in the design of a major security vulnerability could allow the...

Vulnerability warning: the D-Link friends of the perbadanan Router the presence of a remote command injection vulnerability-vulnerability warning-the black bar safety net

Recently security researcher at D-Link friends of the perbadanan on the router discovered a serious security vulnerability, an attacker can remotely obtain device The maximum access to the Root, and hijacking DNS settings or on the device to execute arbitrary commands. As early as last 1 1 month,...

Symantec Encryption Management Server < 3.2.0 MP6 - Remote Command Injection

Vantage Point Security Advisory 2014-007 ======================================== Title: Symantec Encryption Management Server - Remote Command Injection ID: VP-2014-007 Vendor: Symantec Affected Product: Symantec Encryption Gateway Affected Versions: 3.2.0 MP6 Product Website:...

Oracle E-Business Multiple Vulnerabilities (January 2015 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - Oracle Application Object Library - Oracle Applications DBA - Oracle Applications DBA - Oracle...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Telecommunications Billing Integrator Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. A security vulnerability exists in the Oracle E-Business Suite Oracle Telecommunications Billing Integrator component that could be exploited by remote attackers to compromise system integrity...

CVE-2015-0380

Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to OA Based UI for Bill...

CVE-2015-0380

Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to OA Based UI for Bill...

D.C.'s Complicated View of Cyberwar, Regulation, Liability

MINNEAPOLIS – Lawmakers and politicians trying to equate cyberwar with a kinetic battle are misguided in putting the two on equal footing, said former National Security Agency general counsel Stewart A. Baker today in his keynote at the Cyber Security Summit. “Cyberweapons are not like nuclear...

Effects full version Windows: iSIGHT surveillance espionage found Windows latest 0day vulnerabilities-vulnerability warning-the black bar safety net

the iSIGHT in Russian cyber-espionage discovered to affect all versions of Windows System with the latest 0day vulnerabilities, vulnerability number CVE-2 0 1 4-4 1 1 4, At present, Microsoft is the emergency of the vulnerability of making the patch. ! Yesterday, Microsoft partners iSIGHT Partner...

Internet Bug Bounty: Ericsson Erlang OTP Core Allocation Subsystem Integer Overflow (All Versions)

Lab Mouse Security Report LMS-2014-06-23-7 Report ID: LMS-2014-06-23-7 Report Code Name: EARLGREY.1 Researcher Name: Don A. Bailey Researcher Organization: Lab Mouse Security Researcher Email: [email protected] Researcher Website: www.securitymouse.com Vulnerability Status: Patched...

Treasure Map — Five Eyes Surveillance Program to Map the Entire Internet

The National Security Agency and its British counterpart, GCHQ, gained secret access to the German telecom companies’ internal networks, including Deutsche Telekom and Netcologne, in an effort to “map the entire Internet — any device, anywhere, all the time.” As reported by German news publicatio...

South Korean Data Breach Compromises 27 Million

A data breach in South Korea appears to have impacted as many as 27 million citizens, roughly 70 percent of the nation’s population. Authorities with the South Jeolla Provincial Police Agency announced late last week that it had apprehended a 24-year-old, known simply as Kim, in addition to 15...

NewGOZ Gameover Zeus Botnet Rebuilds

It didn’t take long for an updated version of GameOver Zeus to make some headway in rebuilding itself. Research published today from Arbor Networks demonstrates that cybercriminals behind GameOver Zeus, which was taken down by law enforcement in early June, have renewed the botnet with at least...

Miniduke APT Campaigh Returns with New Targets, Hacking Tools

The Miniduke advanced persistent threat APT campaign uncovered by researchers at Kaspersky Lab and CrySys Lab in February 2013 is back after a year-long hiatus in which attacks abated almost entirely. While the initial Miniduke operations primarily targeted government organizations in Europe, thi...

International TeleCommunications WebBBS 2.13 login & password Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/803/info Certain versions of WebBBS by Mike Bryeans of International TeleCommunications contain a flaw in the initial login program. User supplied data via the login name and password are not bounds checked and can result...

British Telecommunications Consumer Webhelper 2.0.0.7 - Multiple Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/24219/info The British Telecommunications Consumer Webhelper ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to bounds-check user-supplied data before copying it into an insufficientl...

AT&T Warns Customers of Data Breach

AT&T has notified some of its mobile customers that employees of one of its contractors accessed some customer information, including birth dates and Social Security numbers, in an effort to generate codes that could be used to unlock devices. The company did not specify how many customers were...