CVE-2016-0863

The vulnerability CVE-2016-0863 affects Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS prior to 5.1 and 4.1.0 Build 16. It is a Cross-Site Request Forgery (CSRF) flaw that allows an attacker to perform actions on an authenticated session, effectively hijacking user aut...

Bank SMS - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Bank SMS published at the 'play' market has multiple vulnerabilities...

CVE-2015-7288

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 allow remote attackers to modify the configuration via a command in an SMS message, as demonstrated by a "4 2" command...

CVE-2015-7287

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message...

Command injection

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 allow remote attackers to modify the configuration via a command in an SMS message, as demonstrated by a "4 2" command...

Design/Logic Flaw

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message...

CVE-2015-7288

The CVE-2015-7288 entry affects CSL DualCom GPRS CS2300-R alarm signaling boards with firmware 1.25–3.53. A remote, unauthenticated attacker could modify device configuration via an SMS command (e.g., “4 2”). The CERT/CC entry expands on multiple issues in these devices (improper authentication, ...

CVE-2015-7288

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 allow remote attackers to modify the configuration via a command in an SMS message, as demonstrated by a "4 2" command...

CVE-2015-7287

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message...

Data-Stealing Android App Impersonates Word Doc

A new strain of Android malware has taken a decidedly old-school approach to infecting mobile devices. Researchers at security company Zscaler said they spotted several hundred new infections since Oct. 10, primarily targeting Android users in China. The malware arrives impersonating a Microsoft...

Warning: 18,000 Android Apps Contains Code that Spy on Your Text Messages

A large number of third-party Android apps have reportedly been discovered grabbing copies of all text messages received or sent to infected devices and sending them to the attackers' server. More than 63,000 Android applications use Taomike SDK – one of the biggest mobile advertisement solutions...

The rice client SDK is aeration can hijack all of the user's SMS-vulnerability warning-the black bar safety net

Mobile App developers are faced with how to be profitable with this inevitable problem, which is the most common method is the application of added advertising. Advertising Alliance to create a function library that facilitate developers the ads which, to start quickly to make money. We previousl...

Whisper: SMS Invite Form Abuse

whisper.sh fails to protect the invite form from abuse from attackers. If a malicious individual wants to abuse this functionality, they could send repeated/automated requests to the same phone number or range of phone numbers that do no actually belong to himself. This would result in lots of...

phpyun 任意用户密码修改两处 (秒破/demo测试)

简要描述： 好久没看过php了。。。。 如题咯。 详细说明： 来看到找回密码的地方。 app/controller/forgetpwd/index.class.php function sendaction $username=yuniconv"utf-8","gbk",$POST'username'; if!$this-CheckRegUser$username&&!$this-CheckRegEmail$username $res'msg'=yuniconv"gbk","utf-8","用户名不符合规范！"; $res'type'='8'; echo...

CVE-2015-3847

Bluetooth in Android before 5.1.1 LMY48T allows attackers to remove stored SMS messages via a crafted application, aka internal bug 22343270...

Code injection

Bluetooth in Android before 5.1.1 LMY48T allows attackers to remove stored SMS messages via a crafted application, aka internal bug 22343270...

CVE-2015-3847

Bluetooth in Android before 5.1.1 LMY48T allows attackers to remove stored SMS messages via a crafted application, aka internal bug 22343270...

CVE-2015-3847

Bluetooth in Android before 5.1.1 LMY48T allows attackers to remove stored SMS messages via a crafted application, aka internal bug 22343270...

CVE-2015-3847

CVE-2015-3847 is an Android Bluetooth elevation-of-privilege issue that could allow a crafted application to delete stored SMS messages. The connected Android security bulletin notes this as a moderate-severity vulnerability affecting 5.1.1 and earlier builds, with patches available in builds LMY...

Android Security Restriction Bypass Vulnerability

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. A security restriction bypass vulnerability exists in Android versions prior to 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows ...