2944 matches found
CVE-2012-2217
The CVE-2012-2217 entry concerns the HTC IQRD service on multiple HTC Android devices (e.g., EVO 4G, EVO Design 4G, Shift 4G, EVO 3D, EVO View 4G, Vivid, Hero) where localhost access to TCP port 2479 is not restricted. This allows remote attackers to perform actions via a crafted app with android...
Researchers Find Bug in SMS App That Can Lead to iPhone Exploits
Researchers have identified a bug in an application that can enable attackers potentially to gain control of a victim’s iPhone. The app in question, TreasonSMS, enables users to send SMS messages from a desktop Web browser by using their iPhones as Web servers. The bug lies in the way that the...
IPhone TreasonSMS - HTML Inject & File Include Vulnerability
Title: ====== IPhone TreasonSMS - HTML Inject & File Include Vulnerability Date: ===== 2012-04-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=154 VL-ID: ===== 154 Introduction: ============= treasonSMS allows you to send SMS from your desktop computer. It turns your...
Fake Instagram App Could Cost Unsuspecting Android Users
Malware writers are taking advantage of the popularity of the Instagram photo application to distribute a form of malware that can send background SMS texts from Android devices. Instead of downloading the app from Android’s marketplace, Google Play, some users are being duped into downloading a...
mobME (SMS Services) SQL Injection Authentication Bypass
Exploit for php platform in category web applications ======================================================= mobME SMS Services SQL Injection Authentication Bypass ======================================================= ==================================================== x ExpL0it TitLe : mobME...
TigerBot - SMS Controlled Android Malware Stealing Information
TigerBot - SMS Controlled Android Malware Stealing Information A new form of Android malware controlled via SMS messages has been discovered and the malware can record phone calls, upload the device's GPS location, and reboot the phone, among other things. Researchers at NQ Mobile, working...
New Android Malware Controlled by SMS, Records Calls, GPS Location
A new form of Android malware controlled via SMS messages has been discovered and the malware can record phone calls, upload the device’s GPS location, and reboot the phone, among other things. Researchers at NQ Mobile Security working with Dr. Xuxian Jiang’s team at nearby North Carolina State...
POC Android botnet - Command and Control Channel over SMS
POC Android botnet - Command and Control Channel over SMS To avoid detection, this proof-of-concept code utilizes the Short Messaging Service SMS as a command & control channel. This adds fault tolerance because, if a smartphone is not available on the GSM network due to being powered off or out...
Android Malware as Beware of Chinese called "The Roar of the Pharaoh"
Android Malware as Chinese game "The Roar of the Pharaoh" Security researchers have spotted a bogus Chinese game, that's actually a trojan horse gathering sensitive information from infected devices, next to sending premium-rate SMS messages. It is Chinese game that is original with its rights bu...
Facebook 'Like' Scam Driven by Malicious Chrome Extension
A Kaspersky Lab researcher has discovered a Brazilian social engineering campaign that attempts to trick Facebook users into installing a malicious plug-in hosted on Google’s Chrome Web Store. The Facebook scam-page solicits victims by promising to teach them how to “remove the virus from their...
New TGLoader Android Malware Found in Alternative Markets
Alternative mobile app markets have become a great place to find new games, utilities and other apps. But mostly they’re great if you’re looking for the latest stealthy Android malware. The newest example is a piece of malware called TGLoader that is showing up in repackaged legitimate apps and h...
CVE-2012-1474
Unspecified vulnerability in the Youni SMS com.snda.youni application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors...
CVE-2012-1480
Unspecified vulnerability in the Pansi SMS com.pansi.msg application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors...
CVE-2012-1474
Unspecified vulnerability in the Youni SMS com.snda.youni application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors...
Code injection
Unspecified vulnerability in the Pansi SMS com.pansi.msg application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors...
Design/Logic Flaw
Unspecified vulnerability in the Youni SMS com.snda.youni application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors...
CVE-2012-1480
Unspecified vulnerability in the Pansi SMS com.pansi.msg application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors...
CVE-2012-1474
Technical details are not publicly available in the provided documents; no affected products, impact, vectors, or remediation are disclosed. Monitor for updates.