CVE-2019-19415

The SIP module of some Huawei products have a denial of service DoS vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the...

CVE-2019-19416

The CVE-2019-19416 issue concerns the SIP module in Huawei products. The vulnerability stems from insufficient verification of SIP packets, allowing a remote attacker to trigger a buffer overflow and a dead loop, resulting in a denial-of-service condition. Affected products are listed in Huawei’s...

CVE-2019-19417

The SIP module of some Huawei products have a denial of service DoS vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the...

CVE-2019-19417

CVE-2019-19417 (and related CVEs CVE-2019-19415/19416) describe three DoS vulnerabilities in the SIP module of some Huawei products. The root cause is insufficient verification of SIP packets, which can cause buffer overflow and a dead loop, enabling a remote attacker to trigger a DoS condition o...

Huawei Data Communication: Three DoS Vulnerabilities in the SIP Module of Some Huawei Products (huawei-sa-20200115-01-sip)

There are three denial of service DoS vulnerabilities in the SIP module of some Huawei products. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Unspecified Vulnerability in Foxit Reader and PhantomPDF

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader prior to version 9.7.2 and PhantomPDF prior to version 9.7.2, which is caused by the program not handling circular references correctly. An attacker can...

Malicious Package

Overview living-dead is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using living-dead...

Denial Of Service (DoS)

openswan is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the Dead Peer Detection DPD in Openswan's pluto IKE daemon. A remote attacker could use a malicious DPD packet to crash the pluto daemon...

Syborg - Recursive DNS Subdomain Enumerator With Dead-End Avoidance System

Syborg is a Recursive DNS Domain Enumerator which is neither active nor completely passive. This tool simply constructs a domain name and queries it with a specified DNS Server. Syborg has a Dead-end Avoidance system inspired from @Tomnomnom's ettu. When you run subdomain enumeration with some of...

Security Advisory - Three DoS Vulnerabilities in the SIP Module of Some Huawei Products

There are three denial of service DoS vulnerabilities in the SIP module of some Huawei products. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit...

What Is a Dead Drop?

A mainstay of spycraft still has plenty of relevance in the digital age...

Huawei Honor10 Lite and Huawei Y9 Denial of Service Vulnerability (CNVD-2019-44785)

Huawei Honor10 Lite and Huawei Y9 are both a smartphone from Chinese company Huawei Huawei. A denial-of-service vulnerability exists in Huawei Honor10 Lite Harry-AL00C before 9.1.0.217 C00E215R3P1 and Huawei Y9 Jackman-L23 before 9.1.0.220 C45E3R1P1T8, which can be exploited to cause a dead loop...

SUSE SLED12 / SLES12 Security Update : glib2 (SUSE-SU-2019:1722-1)

This update for glib2 provides the following fix : Security issues fixed : CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. CVE-2018-16428: Avoid a NULL pointer dereference that could crash glib2 users in markup processing bnc1107121. CVE-2018-16429:...

VFront 0.99.5 Reflective Cross Site Scripting

Multiple Reflected Cross-site Scripting Vulnerabilities in VFront 0.99.5 Information -------------------- Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting in VFront 0.99.5 Affected Software: VFront Affected Versions: 0.99.5 Homepage: http://www.vfront.org/ Vulnerability:...

Beto O'Rourke Was Part of an Infamous '90s Hacker Group

The presidential candidate's first constituency was Cult of the Dead Cow...

Cryptocurrency Firm Loses $145 Million After CEO Dies With Only Password

QuadrigaCX, the largest bitcoin exchange in Canada, has claimed to have lost CAD 190 million nearly USD 145 million worth of cryptocurrency after the exchange lost access to its cold offline storage wallets. Reason? Unfortunately, the only person with access to the company's offline wallet, found...

Rockstar Games: Dom based xss on /reddeadredemption2/br/videos

In this report, the researcher identified a DOM-based XSS vulnerability affecting localized versions of the Red Dead Redemption 2 video viewer on our website, e.g. www.rockstargames.com/reddeadredemption2/br/videos. This affected all major modern browsers, and could have been used for cookie or...

The Evolution of Darknets

This is interesting: To prevent the problems of customer binding, and losing business when darknet markets go down, merchants have begun to leave the specialized and centralized platforms and instead ventured to use widely accessible technology to build their own communications and operational...

Microsoft building Chrome-based browser to replace Edge on Windows 10

It is no secret how miserably Microsoft's 3-year-old Edge web browser has failed to compete against Google Chrome despite substantial investment and continuous improvements. According to the latest round of tech rumors, Microsoft has given up on Edge and reportedly building a new Chromium -based...

Smart Locks: Dumb Security

Dave Lodge and I presented at the BSides Manchester pre-party, aka ‘beersides’ on the subject of not very smart locks. Doubtless you’ve already seen our work on the Tapplock over BLE and the API, our hardware work on the Fipilock, and maybe even our smart lock security interview with hardware.io...