PT-2012-3889

Name of the Vulnerable Software and Affected Versions HTC IQRD service for Android on the HTC EVO 4G versions prior to 4.67.651.3 HTC IQRD service for Android on the EVO Design 4G versions prior to 2.12.651.5 HTC IQRD service for Android on the Shift 4G versions prior to 2.77.651.3 HTC IQRD servi...

CVE-2012-2217: Undefined Security Weakness

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote...

Researchers Find Bug in SMS App That Can Lead to iPhone Exploits

Researchers have identified a bug in an application that can enable attackers potentially to gain control of a victim’s iPhone. The app in question, TreasonSMS, enables users to send SMS messages from a desktop Web browser by using their iPhones as Web servers. The bug lies in the way that the...

IPhone TreasonSMS - HTML Inject & File Include Vulnerability

Title: ====== IPhone TreasonSMS - HTML Inject & File Include Vulnerability Date: ===== 2012-04-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=154 VL-ID: ===== 154 Introduction: ============= treasonSMS allows you to send SMS from your desktop computer. It turns your...

Fake Instagram App Could Cost Unsuspecting Android Users

Malware writers are taking advantage of the popularity of the Instagram photo application to distribute a form of malware that can send background SMS texts from Android devices. Instead of downloading the app from Android’s marketplace, Google Play, some users are being duped into downloading a...

mobME (SMS Services) SQL Injection Authentication Bypass

Exploit for php platform in category web applications ======================================================= mobME SMS Services SQL Injection Authentication Bypass ======================================================= ==================================================== x ExpL0it TitLe : mobME...

TigerBot - SMS Controlled Android Malware Stealing Information

TigerBot - SMS Controlled Android Malware Stealing Information A new form of Android malware controlled via SMS messages has been discovered and the malware can record phone calls, upload the device's GPS location, and reboot the phone, among other things. Researchers at NQ Mobile, working...

New Android Malware Controlled by SMS, Records Calls, GPS Location

A new form of Android malware controlled via SMS messages has been discovered and the malware can record phone calls, upload the device’s GPS location, and reboot the phone, among other things. Researchers at NQ Mobile Security working with Dr. Xuxian Jiang’s team at nearby North Carolina State...

POC Android botnet - Command and Control Channel over SMS

POC Android botnet - Command and Control Channel over SMS To avoid detection, this proof-of-concept code utilizes the Short Messaging Service SMS as a command & control channel. This adds fault tolerance because, if a smartphone is not available on the GSM network due to being powered off or out...

Android Malware as Beware of Chinese called "The Roar of the Pharaoh"

Android Malware as Chinese game "The Roar of the Pharaoh" Security researchers have spotted a bogus Chinese game, that's actually a trojan horse gathering sensitive information from infected devices, next to sending premium-rate SMS messages. It is Chinese game that is original with its rights bu...

Facebook 'Like' Scam Driven by Malicious Chrome Extension

A Kaspersky Lab researcher has discovered a Brazilian social engineering campaign that attempts to trick Facebook users into installing a malicious plug-in hosted on Google’s Chrome Web Store. The Facebook scam-page solicits victims by promising to teach them how to “remove the virus from their...

New TGLoader Android Malware Found in Alternative Markets

Alternative mobile app markets have become a great place to find new games, utilities and other apps. But mostly they’re great if you’re looking for the latest stealthy Android malware. The newest example is a piece of malware called TGLoader that is showing up in repackaged legitimate apps and h...

CVE-2012-1480

Unspecified vulnerability in the Pansi SMS com.pansi.msg application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors...

CVE-2012-1474

Unspecified vulnerability in the Youni SMS com.snda.youni application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors...

CVE-2012-1474

Unspecified vulnerability in the Youni SMS com.snda.youni application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the Youni SMS com.snda.youni application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors...

Code injection

Unspecified vulnerability in the Pansi SMS com.pansi.msg application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors...

CVE-2012-1480

Unspecified vulnerability in the Pansi SMS com.pansi.msg application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors...

CVE-2012-1474

Technical details are not publicly available in the provided documents; no affected products, impact, vectors, or remediation are disclosed. Monitor for updates.

CVE-2012-1480

Technical details about CVE-2012-1480 are not provided in the supplied documents; no affected versions, impact, or fixes are disclosed. Monitor for updates.