93 matches found
EUVD-2006-0744
Malware in sbrugna...
EUVD-2007-5612
Malware in sbrugna...
EUVD-2018-7385
Malware in sbrugna...
EUVD-2007-3276
Malware in sbrugna...
EUVD-2006-0745
Malware in sbrugna...
EUVD-2008-6111
Malware in sbrugna...
EUVD-2006-0746
Malware in sbrugna...
CVE-2024-20898
Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...
PT-2024-18811 · Unknown · Softphoneclient
Name of the Vulnerable Software and Affected Versions: SoftphoneClient in IMS service versions prior to SMR Jul-2024 Release 1 Description: The issue allows local attackers to obtain sensitive information due to the use of implicit intent for sensitive communication in the SoftphoneClient...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jul-2024 Release 1 prior to version 1, which stems from an issue with the SoftphoneClien...
Threat Source newsletter (April 6, 2023) — Another friendly reminder about supply chain attacks
Welcome to this weeks edition of the Threat Source newsletter. It seems like we cant go a full calendar year without a major supply chain attack. In late 2020 we had the SolarWinds incident which, doesnt that somehow seem like five years ago but also yesterday?, then the REvil ransomware group...
Threat Advisory: 3CX Softphone Supply Chain Compromise
Cisco Talos is tracking and actively responding to a supply chain attack involving the 3CX Desktop Softphone application. This is a multi-stage attack that involves sideloading DLLs, seven-day sleep routines, and additional payloads dependent on a now-removed GitHub repository for Windows-based...
FreeSWITCH 1.10.6 Missing SIP MESSAGE Authentication Exploit
FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing - Fixed versions: v1.10.7 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-07-freeswitch-SIP-MESSAGE-without-auth - Vendor Security Advisory:...
CVE-2018-15508
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhoneissue 1 of 2...
CVE-2018-15508
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhoneissue 1 of 2...
Design/Logic Flaw
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhoneissue 1 of 2...
CVE-2018-15508
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhoneissue 1 of 2...
Intermedia softphone - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Intermedia softphone published at the 'play' market has multiple vulnerabilities...
eStara SoftPhone 3.0.1 SIP Packet Multiple Malformed Field DoS
No description provided by source. source: http://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. For the negative 'Expires' field issue:...
Nortel Networks UNIStim IP Softphone 2050 RTCP Port Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26118/info Nortel Networks UNIStim IP Softphone is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory...