Sensitive Information Leakage

Moodle is vulnerable to sensitive information leakage. Privacy settings for the IMS-LT which includes the sendname, sendemailaddr, and acceptgrades settings are not properly enforced, allowing the transfer of personal sensitive information...

Cross-site Request Forgery (CSRF)

Moodle is vulnerable to cross-site request forgery CSRF attacks. These attacks are possible because it does not have enough session checking in enrol/imsenterprise/importnow.php during import of IMS Enterprise identities. This can allow a malicious user to hijack administrator's authentication...

SigPloit - Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP

SiGploit a signaling security testing framework dedicated to Telecom Security professionals and reasearchers to pentest and exploit vulnerabilites in the signaling protocols used in mobile operators regardless of the geneartion being in use. SiGploit aims to cover all used protocols used in the...

Security Flaws in 4G VoLTE

Research paper: "Subscribers remote geolocation and tracking using 4G VoLTE enabled Android phone," by Patrick Ventuzelo, Olivier Le Moal, and Thomas Coudray. Abstract: VoLTE Voice over LTE is a technology implemented by many operators over the world. Unlike previous 2G/3G technologies, VoLTE...

PT-2017-2727

Name of the Vulnerable Software and Affected Versions Android CAF-сборки affected versions not specified Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the IMS RCS...

CVE-2016-2887

IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-2887

IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

Design/Logic Flaw

IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-2887

IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-2887

Summary: IBM IMS Enterprise Suite Data Provider for Microsoft .NET (part of IMS) is vulnerable before version 3.2.0.1. The issue affects 3.2.0.0 and earlier and allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. Impact (as stated): informatio...

CVE-2016-2887: Exposure of Sensitive Information to an Unauthorized Actor

IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

PT-2016-5269

Name of the Vulnerable Software and Affected Versions IBM IMS Enterprise Suite Data Provider versions prior to 3.2.0.1 for Microsoft .NET Description The issue allows remote authenticated users to obtain sensitive information or modify data. Recommendations For versions prior to 3.2.0.1, update t...

Moodle 2.2.x < 2.2.11 Multiple Vulnerabilities

Binary data 9415.prm...

Moodle 2.3.x < 2.3.8 Multiple Vulnerabilities

Binary data 9416.prm...

Moodle 2.4.x < 2.4.5 / 2.5.x < 2.5.1 Multiple Vulnerabilities

Binary data 9417.prm...

CVE-2016-3989

The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote authenticated users to obtain root...

Stack overflow

Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote attacker...

CVE-2016-3989

The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote authenticated users to obtain root...

CVE-2016-3989

CVE-2016-3989 affects Meinberg IMS-LANTIME and related NTP Time Server devices running firmware

CVE-2016-3988

CVE-2016-3988 affects Meinberg NTP Time Server interfaces across multiple IMS-LANTIME/LANTIME/SyncFire/LCES devices (M3000, M1000, M500, M900, M600, M400, M300, M200, M100, SyncFire 1100, LCES) with firmware prior to 6.20.004. The vulnerability is due to multiple stack-based buffer overflows in t...