Lucene search
+L

2913 matches found

ThreatPost
ThreatPost
added 2019/12/19 9:47 p.m.76 views

267M Facebook Users’ Phone Numbers Exposed Online

A database exposing the names, phone numbers and Facebook user IDs of millions of platform users was left unsecured on the web for nearly two weeks before it was removed. Security researcher Bob Diachenko, who along with Comparitech discovered the unsecured Elasticsearch database, believe it...

0.9AI score
SaveExploits0References6
NVD
NVD
added 2019/12/18 6:15 p.m.22 views

CVE-2019-8553

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2. Clicking a malicious SMS link may lead to arbitrary code execution...

8.8CVSS8.7AI score0.01833EPSS
SaveExploits0References3
Prion
Prion
added 2019/12/18 6:15 p.m.20 views

Memory corruption

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2. Clicking a malicious SMS link may lead to arbitrary code execution...

6.8CVSS8.3AI score0.01833EPSS
SaveExploits0References3Affected Software3
Cvelist
Cvelist
added 2019/12/18 5:33 p.m.29 views

CVE-2019-8553

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2. Clicking a malicious SMS link may lead to arbitrary code execution...

8.7AI score0.01833EPSS
SaveExploits0References3
NVD
NVD
added 2019/12/18 6:15 a.m.29 views

CVE-2019-10487

Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ800...

10CVSS9.4AI score0.00907EPSS
SaveExploits0References1
Prion
Prion
added 2019/12/18 6:15 a.m.27 views

Buffer overflow

Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ800...

10CVSS9.3AI score0.00907EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/12/18 5:25 a.m.39 views

CVE-2019-10487

Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ800...

9.4AI score0.00907EPSS
SaveExploits0References1
CVE
CVE
added 2019/12/18 5:25 a.m.115 views

CVE-2019-10487

CVE-2019-10487 affects Qualcomm Snapdragon family components (e.g., Snapdragon Auto/Compute/IoT lineups) and is caused by a buffer over-read while parsing SMS OTA messages at the transport layer when the network provides unintended values. The issue spans a wide set of Qualcomm/SC/MDM/SDA/SXR dev...

10CVSS9.2AI score0.00907EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2019/12/17 12:00 a.m.13 views

Unspecified Vulnerability in Tecno Camon

The Tecno Camon is a Camon series smartphone from the Chinese company Transocean. An unspecified vulnerability exists in Tecno Camon. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

7.8CVSS7.4AI score0.00387EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/17 12:00 a.m.5 views

Unspecified Vulnerability in Tecno Camon iClick (CNVD-2020-14789)

The Transn Tecno Camon iClick is a smartphone from the Chinese company Transn. An unspecified vulnerability exists in Tecno Camon iClick. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

9.3CVSS7.4AI score0.01066EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/17 12:00 a.m.11 views

Unspecified Vulnerability in Tecno Camon iClick (CNVD-2020-14790)

The Transn Tecno Camon iClick is a smartphone from the Chinese company Transn. An unspecified vulnerability exists in Tecno Camon iClick. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

7.8CVSS7.4AI score0.00332EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/17 12:00 a.m.9 views

Unspecified Vulnerability in Tecno Camon (CNVD-2020-14795)

The Tecno Camon is a Camon series smartphone from the Chinese company Transocean. An unspecified vulnerability exists in Tecno Camon. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

7.8CVSS7.4AI score0.00387EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/17 12:00 a.m.7 views

Unspecified Vulnerability in Tecno Camon iClick 2 (CNVD-2020-14782)

The Transn Tecno Camon iClick 2 is a smartphone from the Chinese company Transn. An unspecified vulnerability exists in Tecno Camon iClick 2. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain user's Wi-Fi...

7.8CVSS7.4AI score0.00387EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/12/12 8:30 a.m.29 views

CVE-2019-2320

Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053...

9.5AI score0.00907EPSS
SaveExploits0References1
HackRead
HackRead
added 2019/12/03 3:52 p.m.40 views

SMS and personal data of millions of Americans leaked online

By Sudais The database leak is yet another set back for Americans. Here's what was in the data and how it may affect victims. This is a post from HackRead.com Read the original post: SMS and personal data of millions of Americans leaked online...

4AI score
SaveExploits0
ThreatPost
ThreatPost
added 2019/12/02 1:33 p.m.55 views

Insecure Database Exposes Millions of Private SMS Messages

Tens of millions of SMS messages have been found on an unprotected database, putting the private data of hundreds of millions of people in the United States at risk for theft or exposure and leaving a communications company open for potential intrusion, security researchers discovered. Noam Rotem...

0.5AI score
SaveExploits0References5
HackRead
HackRead
added 2019/11/27 6:56 p.m.91 views

Ginp Android trojan targets banking apps & threatens 2FA/SMS

By Waqas Dubbed Ginp; the trojan keeps coming back with new capabilities. Here's what the malware does to Android devices... This is a post from HackRead.com Read the original post: Ginp Android trojan targets banking apps & threatens 2FA/SMS...

2.3AI score
SaveExploits0
Hacker One
Hacker One
added 2019/11/22 3:45 p.m.19 views

Mail.ru: Account Takeover worki.ru

worki.ru had no sufficient protection against SMS code bruteforce...

3.5AI score
SaveExploits0
Hacker One
Hacker One
added 2019/11/21 5:54 p.m.121 views

Bumble: Bruteforce password recovery code

Summary It's possible to bruteforce recovery code from SMS as iOS application doesn't have limits for incorrect inputs. I have tried 50+ different combinations until I reached code from SMS. Steps To Reproduce 1. Click "Use another option" on application startup view 1. Enter your phone number 1...

0.2AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2019/11/07 12:05 p.m.67 views

Eavesdropping on SMS Messages inside Telco Networks

Fireeye reports on a Chinese-sponsored espionage effort to eavesdrop on text messages: FireEye Mandiant recently discovered a new malware family used by APT41 a Chinese APT group that is designed to monitor and save SMS traffic from specific phone numbers, IMSI numbers and keywords for subsequent...

1.2AI score
SaveExploits0
Rows per page
Query Builder