PT-2014-2296

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.31T Description The issue allows remote attackers to cause a denial of service, resulting in media loops and stack memory corruption, via VoIP traffic. Recommendations For versions prior to 15.31T, update to...

Google Voice Private/Unknown Number Disclosure

!/usr/bin/perl Title: Google Voice private/unknown numbers disclosure Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: March 24 2014 Reported: March 28 2014 Published: April 04 2014 MorXploit Research http://www.MorXploit.com Service: Google Voice Vendor: Google...

PhonerLite 2.14 SIP Soft Phone - SIP Digest Leak Information Disclosure (CVE-2014-2560)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...

PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure

PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author...

PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...

[SECURITY] Fedora 20 Update: asterisk-11.8.1-1.fc20

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Debian DSA-2854-1 : mumble - several vulnerabilities

Several issues have been discovered in mumble, a low latency VoIP client. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2014-0044 It was discovered that a malformed Opus voice packet sent to a Mumble client could trigger a NULL pointer dereference or an...

[SECURITY] [DSA 2854-1] mumble security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2854-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 05, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2854-1] mumble security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2854-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 05, 2014 http://www.debian.org/security/faq -...

DSA-2854-1 mumble - several

Bulletin has no description...

Debian Security Advisory DSA 2854-1 (mumble - several vulnerabilities)

Several issues have been discovered in mumble, a low latency VoIP client. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2014-0044 It was discovered that a malformed Opus voice packet sent to a Mumble client could trigger a NULL pointer dereference or an...

Reflected cross-site scripting (XSS) vulnerability in Mediatrix Web Management Interface login page

Advisory ID: hag201476 Product: Mediatrix Web Management Interface Vendor: Media5 Corporation Vulnerable Versions: Mediatrix 4402 Device with Firmware Dgw 1.1.13.186 and probably prior Tested Version: Mediatrix 4402 Device with Firmware Dgw 1.1.13.186 Advisory Publication: January 23, 2014 Vendor...

CVE-2014-1612

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2014-1612

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2014-1612

CVE-2014-1612 affects Media5 Mediatrix 4402 Web Management Interface (login.esp). The vulnerability is a reflected cross-site scripting (XSS) in the username parameter on the login page, allowing remote attackers to inject scripts. Affected firmware includes Dgw 1.1.13.186 and earlier. Exploitati...

CVE-2014-1612: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

PT-2014-4257

Name of the Vulnerable Software and Affected Versions Media5 Mediatrix 4402 VoIP Gateway versions Dgw 1.1.13.186 and earlier Description A cross-site scripting issue exists in the Web Management Interface, specifically in login.esp, allowing remote attackers to inject arbitrary web script or HTML...

[Xplico 1.1.0] Open Source Network Forensic Analysis Tool (NFAT)

The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn’t a network protocol analyzer. Xplico is ...

NetVanta 7100 ADTRAN AOS跨站脚本漏洞

CVE ID:CVE-2013-5218 ADTRAN NetVanta 7100是一款VoIP解决方案设备。 ADTRAN NetVanta 7100 GUI登录页面不正确过滤用户提交的输入，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 ADTRAN NetVanta 7100 AOS R10.8.1 厂商补丁： ADTRAN ----- ADTRAN NetVanta 7100 AOS R10.8.1已经修复该漏洞，建议用户下载更新： http://www.adtran.com/...

Grandstream GXP VOIP Phones Default Credentials (HTTP)

The remote Grandstream GXP VOIP Phone is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...