CVE-2019-20030

The CVE-2019-20030 entry concerns a NEC UM8000 voicemail system where an attacker who knows the modem access number can use SSH tunneling or standard Linux tools to access the system’s LAN port. All versions are affected. Red Hat and NVD entries corroborate a local-access issue with potential imp...

CVE-2019-20030

An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected...

CVE-2019-20028

CVE-2019-20028 affects NEC PBXes running InMail (all SV8100/SV9100/SL1100/SL2100 variants) where the WebPro administration interface allows unauthenticated read-only access to voicemails, greetings, and voice response system content. The root cause is an unauthenticated exposure via WebPro; impac...

CVE-2019-20031: Improper Restriction of Excessive Authentication Attempts

NEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may permit an infinite number of login attempts in the telephone user interface TUI, effectively allowing brute force attacks...

Scammers using voicemail email phishing scam to steal data

By Waqas Scammers are taking advantage of COVID-19 pandemic to spread a voicemail email phishing scam. This is a post from HackRead.com Read the original post: Scammers using voicemail email phishing scam to steal data...

Meetecho Janus Competitive Conditions Issue Vulnerability (CNVD-2020-19851)

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A competitive conditions issue vulnerability exists in the plugins/janusvoicemail.c file of the VoiceMail plugin in Meetecho Janus 0.9.1 and earlier versions. An attacker can exploit this vulnerability to cause the serve...

CVE-2020-10576

An issue was discovered in Janus through 0.9.1. plugins/janusvoicemail.c in the VoiceMail plugin has a race condition that could cause a server crash...

CVE-2020-10576

An issue was discovered in Janus through 0.9.1. plugins/janusvoicemail.c in the VoiceMail plugin has a race condition that could cause a server crash...

DEBIAN-CVE-2020-10576

An issue was discovered in Janus through 0.9.1. plugins/janusvoicemail.c in the VoiceMail plugin has a race condition that could cause a server crash...

CVE-2020-10576

An issue was discovered in Janus through 0.9.1. plugins/janusvoicemail.c in the VoiceMail plugin has a race condition that could cause a server crash...

Race condition

An issue was discovered in Janus through 0.9.1. plugins/janusvoicemail.c in the VoiceMail plugin has a race condition that could cause a server crash...

UBUNTU-CVE-2020-10576

An issue was discovered in Janus through 0.9.1. plugins/janusvoicemail.c in the VoiceMail plugin has a race condition that could cause a server crash...

CVE-2020-10576

An issue was discovered in Janus through 0.9.1. plugins/janusvoicemail.c in the VoiceMail plugin has a race condition that could cause a server crash...

CVE-2020-10576

CVE-2020-10576 affects Meetecho Janus WebRTC Server up to version 0.9.1. The vulnerability is a race condition in plugins/janus_voicemail.c (VoiceMail plugin) that can cause the server to crash. The issue is documented across multiple sources (NVD, Red Hat, CNVD, OSV, UBUNTU, Debian, etc.). The a...

CVE-2020-10576

An issue was discovered in Janus through 0.9.1. plugins/janusvoicemail.c in the VoiceMail plugin has a race condition that could cause a server crash...

CVE-2020-10576: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in Janus through 0.9.1. plugins/janusvoicemail.c in the VoiceMail plugin has a race condition that could cause a server crash...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-43410)

FusionPBX is an open source enterprise IPPBX interface management system based on FreeSWITHC. A cross-site scripting vulnerability exists in app/voicemailgreetings/voicemailgreetingedit.php in FusionPBX 4.4.1. An attacker can exploit this vulnerability to inject arbitrary web script or HTML via t...

PT-2019-15833 · Fusionpbx · Fusionpbx

Name of the Vulnerable Software and Affected Versions: FusionPBX version 4.4.1 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id and/or voicemail id parameters in the voicemail greeting edit.php file. Recommendations: For FusionPBX...

Fake Voicemail/Office 365 Attack Targets Enterprise Execs

A phishing campaign is making the rounds that uses fake voicemail messages to lure victims into revealing their Office 365 email credentials. The targets are “high-profile companies,” according to researchers, mainly in the tourism, entertainment and real-estate industries. A wide range of...

The Fully Remote Attack Surface of the iPhone

Posted by Natalie Silvanovich, Project Zero While there have been several rumours and reports of fully remote vulnerabilities affecting the iPhone being used by attackers in the last couple of years, limited information is available about the technical details of these vulnerabilities, as well as...