CVE-2008-6775

HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service CPU consumption, SMS consumption, and connectivity loss via a flood of vCards to UDP port 9204...

三星M8800 Innov8和SGH-J750手机SMS Provisioning消息绕过认证漏洞

BUGTRAQ ID: 34705 M8800 Innov8和SGH-J750都是三星所出品的智能手机。 M8800 Innov8和SGH-J750手机没有向用户显示provisioning消息的来源；接受了消息体中不存在SEC和MAC参数的未经认证SMS Provisioning消息；即使接受了消息体中存在SEC和MAC参数的已认证SMS Provisioning消息，也没有对参数执安全检查。如果远程攻击者发送了上述类型的provisioning消息的话，就可能扮演为合法的来源，诱骗用户安装恶意配置。 Samsung SGH-J750 Samsung M8800 Innov8...

Samsung cellular phones unauthorized access

SMS Provisioning messages are not authenticated, allowing device configuration, including PIN codes change...

MSL-2009-001 - Samsung Missing Provisioning Authentication

Security Advisory MSL-2009-001 - Samsung Missing Provisioning Authentication Advisory Information -------------------- Title: Samsung Missing Provisioning Authentication Advisory ID: MSL-2009-001 Advisory URL: http://www.mseclab.com/index.php?pageid=148 Published: 2009-04-23 Updated: 2009-04-23...

New ransomware locks PCs, demands premium SMS for removal

From ZDNet Dancho Danchev PandaLabs is reporting on a newly discovered ransomware variant pandasecurity.comwhich locks the affected user’s PC, and demands a premium SMS in order to deactivate it. The ransomware doesn’t have any self-propagation functions and appears to be coming under the form of...

Huawei HSDPA routers SMS crossite scripting

SMS text is shown unfiltered...

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its web interface. The SMS text is...

Pwn2Own 2009: Browsers and smart phones are targets

TippingPoint’s Zero Day Initiative has released the rules for this year’s CanSecWest PWN2OWN contest, which will target unpatched flaws in Web browsers and mobile devices. Among the target list this year: Microsoft’s Internet Explorer 8, Apple’s Safari, Google’s Chrome, Windows Mobile, Google...

Optus/Huawei E960 HSDPA Router SMS XSS Attack

No description provided by source. XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its we...

Optus/Huawei E960 HSDPA Router SMS XSS Attack

Exploit for hardware platform in category remote exploits ============================================= Optus/Huawei E960 HSDPA Router SMS XSS Attack ============================================= XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router...

OptusHuawei E960 HSDPA Router - Sms Cross-Site Scripting

OptusHuawei E960 HSDPA Router - Sms Cross-Site Scripting XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and...

Optus/Huawei E960 HSDPA Router - Sms Cross-Site Scripting

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its web interface. The SMS text is...

Optus/Huawei E960 HSDPA Router Cross Site Scripting

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its web interface. The SMS text is...

Design/Logic Flaw

The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service device reboot or hang-up via a malformed WAP Push packet to 1 SMS or 2 UDP port 2948...

CVE-2009-0396

CVE-2009-0396 affects multiple Sony Ericsson feature phones (W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, K530i). The vulnerability is triggered by a malformed WAP Push packet sent to (1) SMS or (2) UDP port 2948, allowing remote attackers to cause a denial of service (device reboot or...

CVE-2009-0396: Improper Input Validation

The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service device reboot or hang-up via a malformed WAP Push packet to 1 SMS or 2 UDP port 2948...

SonyEricsson mobile phones WAP DoS

Crash on SMS or UDP/2948 WAP PUSH message handling...

CVE-2008-5826

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...

Design/Logic Flaw

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...

Design/Logic Flaw

The SmartPoster implementation on the Nokia 6131 Near Field Communication NFC phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR aka \r, and . dot characters, which allows remote attackers to trick a user into loadi...