Apple iPhone memory corruption

Memory corruption on SMS messages parsing...

Apple Working to Fix Serious iPhone SMS Flaw

From IDG News Service Sumner Lemon Apple is working to fix an iPhone vulnerability that could allow an attacker to remotely install and run unsigned software code with root access to the phone. The attack in question exploits a weakness in the way iPhones handle text messages received via SMS Sho...

New SMS Hacking Tool Coming at Black Hat

From DarkReading Kelly Jackson Higgins Texting just keeps getting riskier: Researchers at next month’s Black Hat USA in Las Vegas will demonstrate newly discovered threats to mobile phone users, as well as release a new iPhone application that tests phones for security flaws. “We set out to creat...

CVE-2008-6775

HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service CPU consumption, SMS consumption, and connectivity loss via a flood of vCards to UDP port 9204...

三星M8800 Innov8和SGH-J750手机SMS Provisioning消息绕过认证漏洞

BUGTRAQ ID: 34705 M8800 Innov8和SGH-J750都是三星所出品的智能手机。 M8800 Innov8和SGH-J750手机没有向用户显示provisioning消息的来源；接受了消息体中不存在SEC和MAC参数的未经认证SMS Provisioning消息；即使接受了消息体中存在SEC和MAC参数的已认证SMS Provisioning消息，也没有对参数执安全检查。如果远程攻击者发送了上述类型的provisioning消息的话，就可能扮演为合法的来源，诱骗用户安装恶意配置。 Samsung SGH-J750 Samsung M8800 Innov8...

Samsung cellular phones unauthorized access

SMS Provisioning messages are not authenticated, allowing device configuration, including PIN codes change...

MSL-2009-001 - Samsung Missing Provisioning Authentication

Security Advisory MSL-2009-001 - Samsung Missing Provisioning Authentication Advisory Information -------------------- Title: Samsung Missing Provisioning Authentication Advisory ID: MSL-2009-001 Advisory URL: http://www.mseclab.com/index.php?pageid=148 Published: 2009-04-23 Updated: 2009-04-23...

New ransomware locks PCs, demands premium SMS for removal

From ZDNet Dancho Danchev PandaLabs is reporting on a newly discovered ransomware variant pandasecurity.comwhich locks the affected user’s PC, and demands a premium SMS in order to deactivate it. The ransomware doesn’t have any self-propagation functions and appears to be coming under the form of...

Huawei HSDPA routers SMS crossite scripting

SMS text is shown unfiltered...

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its web interface. The SMS text is...

Pwn2Own 2009: Browsers and smart phones are targets

TippingPoint’s Zero Day Initiative has released the rules for this year’s CanSecWest PWN2OWN contest, which will target unpatched flaws in Web browsers and mobile devices. Among the target list this year: Microsoft’s Internet Explorer 8, Apple’s Safari, Google’s Chrome, Windows Mobile, Google...

Optus/Huawei E960 HSDPA Router SMS XSS Attack

No description provided by source. XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its we...

OptusHuawei E960 HSDPA Router - Sms Cross-Site Scripting

OptusHuawei E960 HSDPA Router - Sms Cross-Site Scripting XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and...

Optus/Huawei E960 HSDPA Router SMS XSS Attack

Exploit for hardware platform in category remote exploits ============================================= Optus/Huawei E960 HSDPA Router SMS XSS Attack ============================================= XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router...

Optus/Huawei E960 HSDPA Router - Sms Cross-Site Scripting

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its web interface. The SMS text is...

Optus/Huawei E960 HSDPA Router Cross Site Scripting

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its web interface. The SMS text is...

Design/Logic Flaw

The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service device reboot or hang-up via a malformed WAP Push packet to 1 SMS or 2 UDP port 2948...

CVE-2009-0396

CVE-2009-0396 affects multiple Sony Ericsson feature phones (W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, K530i). The vulnerability is triggered by a malformed WAP Push packet sent to (1) SMS or (2) UDP port 2948, allowing remote attackers to cause a denial of service (device reboot or...

SonyEricsson mobile phones WAP DoS

Crash on SMS or UDP/2948 WAP PUSH message handling...

CVE-2008-5826

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...