2913 matches found
[SECURITY] Fedora 29 Update: gnome-shell-extension-gsconnect-21-2.fc29
The KDE Connect project allows devices to securely share content such as notifications and files as well as interactive features such as SMS messagi ng and remote input. The KDE Connect team maintains cross-desktop, Android and Sailfish applications as well as an interface for KDE Plasma. GSConne...
[SECURITY] Fedora 30 Update: gnome-shell-extension-gsconnect-21-2.fc30
The KDE Connect project allows devices to securely share content such as notifications and files as well as interactive features such as SMS messagi ng and remote input. The KDE Connect team maintains cross-desktop, Android and Sailfish applications as well as an interface for KDE Plasma. GSConne...
Apple iOS < 12.2 Multiple Vulnerabilities (APPLE-SA-2019-3-25-1)
Binary data 700558.prm...
Google Makes it Tough for Rogue App Developers Get Back on Android Play Store
Even after Google's security oversight over its already-huge Android ecosystem has evolved over the years, malware apps still keep coming back to Google Play Store. Sometimes just reposting an already detected malware app from a newly created Play Store account, or using other developers' existin...
The vulnerability in the implementation of SMS processing functions in Cisco IOS and Cisco IOS XE operating systems allows a hacker to induce a service failure.
The vulnerability of the SMS processing function in Cisco IOS and Cisco IOS XE operating systems exists due to errors in the processing of SMS Protocol Data Units PDUs, which are encoded using a specific set of symbols. Exploiting this vulnerability can allow an attacker to cause service failures...
Large-scale SIM swap fraud
Introduction SIM swap fraud is a type of account takeover fraud that generally targets a weakness in two-factor authentication and two-step verification, where the second factor or step is an SMS or a call placed to a mobile telephone. The fraud centers around exploiting a mobile phone operator's...
Gustuff banking botnet targets Australia
Vitor Ventura authored this post. Executive summary Cisco Talos has uncovered a new Android-based campaign targeting Australian financial institutions. As the investigation progressed, Talos came to understand that this campaign was associated with the "ChristinaMorrow" text message spam scam...
Zomato: Bypassing the SMS sending limit for download app link.
Summary: Here an attacker can send the download link sms to any number of people bypassing the sms rate limit imposed by zomato. Description: zomato provides an easy way for the users to download their app when they are at the home page of zomato's website. A user can send upto 15 sms to themself...
CVE-2019-1747
A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper...
Design/Logic Flaw
A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper...
Cisco IOS and IOS XE SMS Denial of Service Vulnerability
Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the implementation of the Short Message Service SMS processing feature in Cisco IOS Software version 15.83M and Cisco IOS XE Software version 16.10.1, which...
CVE-2019-1747 Cisco IOS and IOS XE Software Short Message Service Denial of Service Vulnerability
A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper...
CVE-2019-1747 Cisco IOS and IOS XE Software Short Message Service Denial of Service Vulnerability
A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper...
CVE-2019-1747
CVE-2019-1747 affects Cisco IOS and IOS XE SMS handling. The issue arises from improper processing of SMS PDUs encoded with a special character set, enabling an unauthenticated, remote attacker to trigger a denial-of-service on affected devices. Exploitation would crash the wireless WAN (WWAN) ce...
Cisco IOS and IOS XE Software Short Message Service Denial of Service Vulnerability
A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper...
A week in security (March 18 – 24)
Last week on Malwarebytes Labs, we touched on the susceptibility of hospitals against phishing attacks, password reuse, the risk of interactive TV shows to side-channel attacks, and Facebook's new and out-of-character plan to promote privacy in the platform. Other cybersecurity news A study...
WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2019-07936)
WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML with the help of the 'In-site...
CVE-2018-17426
WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI...