CVE-2011-4919

mpack 1.6 has information disclosure via eavesdropping on mails sent by other users...

Information disclosure

mpack 1.6 has information disclosure via eavesdropping on mails sent by other users...

CVE-2011-4919

mpack 1.6 has information disclosure via eavesdropping on mails sent by other users...

UBUNTU-CVE-2011-4919

mpack 1.6 has information disclosure via eavesdropping on mails sent by other users...

CVE-2011-4919

CVE-2011-4919 affects mpack 1.6, described as a information disclosure vulnerability enabling eavesdropping on mails sent by other users. The connected records consistently state the issue and its generic impact (information disclosure) but do not provide a vendor patch/version that fixes it. No ...

CVE-2011-4919

mpack 1.6 has information disclosure via eavesdropping on mails sent by other users...

CVE-2011-4919

mpack 1.6 has information disclosure via eavesdropping on mails sent by other users...

PT-2019-6708 · Mpack · Mpack

Name of the Vulnerable Software and Affected Versions: mpack version 1.6 Description: The issue allows for information disclosure through eavesdropping on mails sent by other users. Recommendations: For version 1.6, at the moment, there is no information about a newer version that contains a fix...

Cisco TelePresence Collaboration Endpoint < 9.8.1 Audio Eavesdropping Vulnerability

According to its self-reported version, the Cisco TelePresence Collaboration Endpoint CE software is a version prior to 9.8.1. It is, therefore, affected by a vulnerability in the CLI which could allow an authenticated, local attacker to enable audio recording without notifying users. C Tenable...

Eavesdropping on SMS Messages inside Telco Networks

Fireeye reports on a Chinese-sponsored espionage effort to eavesdrop on text messages: FireEye Mandiant recently discovered a new malware family used by APT41 a Chinese APT group that is designed to monitor and save SMS traffic from specific phone numbers, IMSI numbers and keywords for subsequent...

Cisco TelePresence Collaboration Endpoint and RoomOS Audio Eavesdropping Vulnerability

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. The vulnerability is due to the presence of unnecessary debug commands. An attacker could exploit th...

Fujitsu Wireless Keyboard Set LX390 Information Disclosure Vulnerability

The Fujitsu Wireless Keyboard Set LX390 is a wireless keyboard from Fujitsu Japan. A security vulnerability exists in the Fujitsu Wireless Keyboard Set LX390, which arises from a program that does not properly encrypt 2.4 GHz communications. An attacker could exploit the vulnerability to listen t...

Code injection

An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, an attacker is able to eavesdrop on sensitive data such as passwords...

CVE-2019-18201

CVE-2019-18201 affects Fujitsu Wireless Keyboard Set LX390 GK381 devices. Root cause: 2.4 GHz communications lack proper encryption, enabling an attacker to sniff keystrokes and other sensitive data (passwords). The issue is documented with high severity (CVSS 3.1: HIGH) and has been linked to pr...

CVE-2019-18201

An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, an attacker is able to eavesdrop on sensitive data such as passwords...

Fujitsu Wireless Keyboard Plagued By Unpatched Flaws

Two high-severity flaws, discovered in a popular Fujitsu wireless keyboard set, could allow attackers from a short distance away to “eavesdrop” on passwords entered into the keyboards, or even fully takeover a victim’s system. Making matters worse, the impacted Fujitsu wireless keyboard LX390...

New Way Found to Use Alexa, Google to 'Voice Phish' and Eavesdrop on Users

Researchers have found new ways that bad actors can exploit Alexa and Google Home smart speakers to spy on users. This time the hack not only includes eavesdropping, but also includes voice-phishing, or using people’s voice cues to determine passwords. The vulnerability lies in small apps created...

Signal app flaw allowed incoming calls to be connected without user interaction

By Sudais This little eavesdropping process happened to be possible because of a method named "handleCallConnected" in their Android client. This is a post from HackRead.com Read the original post: Signal app flaw allowed incoming calls to be connected without user interaction...

CVE-2019-17191

The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user interaction, via a connect message. The existence of the call is noticeable to the callee; however, the audio channel may be open before the callee can block...

Design/Logic Flaw

The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user interaction, via a connect message. The existence of the call is noticeable to the callee; however, the audio channel may be open before the callee can block...