CounterPath eyeBeam software SIP IP Phone DoS

Buffer overflow on oversized SIP packet header name...

ACT P202S wireless VoIP phone multiple vulnerabilities

VxWorks debugger TCP/17185 access, rlogin access...

MPM HP-180W wireless VoIP phone information leak

Undocumented TCP/9090 leaks information on phone configuration...

[Full-disclosure] Clipcomm CP-100E VoIP wireless desktop phone open debug service TCP/60023

I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== VENDOR: Clipcomm VENDOR NOTIFIED: 7 December, 2005 PRODUCT: Clipcomm CP-100E VoIP...

[SA18479] Cisco IP Phones SYN Flood Device Reload Vulnerability

TITLE: Cisco IP Phones SYN Flood Device Reload Vulnerability SECUNIA ADVISORY ID: SA18479 VERIFY ADVISORY: http://secunia.com/advisories/18479/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: Cisco IP Phone 7900 Series http://secunia.com/product/2809/ SOFTWARE: Cis...

Cisco IP Phones DoS

Syn-flood causes phone to reload...

CVE-2006-0179

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

Code injection

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

CVE-2006-0179

The CVE-2006-0179 issue affects Cisco IP Phone 7940. It describes a remote denial-of-service where an attacker can cause a reboot by sending a large volume of TCP SYN packets to arbitrary ports, with a demonstration targeting port 80. Connected documents corroborate the reboot-based DoS vector vi...

CVE-2006-0179

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

Cisco IP Phone 7940 (Reboot) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ====================================================== Cisco IP Phone 7940 Reboot Denial of Service Exploit ====================================================== !/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin...

Cisco IP Phone 7940 - Reboot (Denial of Service)

!/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! not private anymore. Vulnerable phones are running ver...

Cisco IP Phone 7940 - Reboot (Denial of Service)

Cisco IP Phone 7940 - Reboot Denial of Service !/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! not...

www.miibeian.gov.cn ICP website record validation vulnerability-vulnerability warning-the black bar safety net

1: login to: 2: registration registration is over the phone does not receive text messages, no verification code） 3: the return home page to 4: input user name, password, CAPTCHA and click Login 5: at this point you enter the“phone code”and“mail code”---- do not enter 6: in the address bar enter“...

CVE-2005-4190

Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by 1 the identity field, 2 Category and 3 Label search fields, 4 the Mobile Phone field, and ...

CVE-2005-3803

Cisco IP Phone VoIP 7920 1.08 contains certain hard-coded "fixed" public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information...

CVE-2005-3804

Cisco IP Phone VoIP 7920 1.08 listens to UDP port 17185 to support a VxWorks debugger, which allows remote attackers to obtain sensitive information and cause a denial of service...

CVE-2005-3803

Cisco IP Phone VoIP 7920 1.08 contains certain hard-coded "fixed" public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information...

CVE-2005-3804

Cisco IP Phone VoIP 7920 1.08 listens to UDP port 17185 to support a VxWorks debugger, which allows remote attackers to obtain sensitive information and cause a denial of service...

CVE-2005-3804

The CVE-2005-3804 family is tied to Cisco IP Phone 7920 (VoIP) 1.0(8), where the device listens on UDP port 17185 to support a VxWorks debugger. This exposes a WDB debug service that remote attackers can use to obtain sensitive information and cause a denial of service. Related entries (Wind Rive...