2765 matches found
PT-2013-4847
Name of the Vulnerable Software and Affected Versions Imperva SecureSphere version 9.0.0.5 Description The issue allows remote authenticated users to upload executable files. This can be achieved by using the private key or public key parameter in a T/keyManagement request to the...
CVE-2013-1246: Undefined Security Weakness
Cisco TelePresence System Software does not properly handle inactive t-shell sessions, which allows remote authenticated users to cause a denial of service memory consumption and service outage by establishing multiple SSH connections, aka Bug ID CSCug77610...
PT-2013-3005
Name of the Vulnerable Software and Affected Versions Cisco TelePresence System Software affected versions not specified Description The issue is related to the improper handling of inactive t-shell sessions, allowing remote authenticated users to cause a denial of service by consuming memory and...
Cisco TelePresence System t-shell Denial of Service Vulnerability
A vulnerability in the t-shell implementation of Cisco TelePresence System Software could allow an authenticated, remote attacker to exhaust the available memory and create a denial of service DoS condition. The vulnerability is due to improper handling of orphaned t-shell sessions. An attacker...
Samsung Galaxy S4 Android Bootloader Unlocked
Those of you who like to tinker and jailbreak Android phones should take notice of some new research conducted on Samsung Galaxy S4 Android devices shipped by AT&T and Verizon. Both device makers ship the Galaxy S4 smartphones with a locked down bootloader that prevents users from uploading custo...
PHDays 2013 hackquest
Кто еще не в курсе, вот здесь: hackquest.phdays.com розыгрываются 20 билетов и 20 фирменных футболок PHDays 2013, который пройдет в Москве 23-24 мая Всем удачи!...
Obama Expands Surveillance to Critical Infrastructure
A little-known policy through which the Departments of Justice, Defense, and Homeland Security offered prosecutorial immunity to companies that helped the U.S. military monitor Internet traffic on the private networks of defense contractors has reportedly been expanded by Executive Order to inclu...
T-Mobile Wi-Fi Calling App vulnerable to Man-in-the-Middle attack
T-Mobile devices having a default Wi-Fi Calling feature that keeps you connected in areas with little or no coverage using Wi-Fi connection. But according to new finding by students Jethro Beekman and Christopher Thompson from University of California Berkeley, that this feature lets millions of...
T-Mobile Wi-Fi Calling App vulnerable to Man-in-the-Middle attack
T-Mobile devices having a default Wi-Fi Calling feature that keeps you connected in areas with little or no coverage using Wi-Fi connection. But according to new finding by students Jethro Beekman and Christopher Thompson from University of California Berkeley, that this feature lets millions of...
T-Mobile Fixes Man-in-the-Middle Vulnerability in Wi-Fi Calling App
UPDATE: The default “Wi-Fi Calling” feature on T-Mobile devices that lets milllions of Android users make phone calls over a wireless Internet connection contained a vulnerability that could have been exploited to perform man-in-the-middle MiTM attacks. Graduate students Jethro Beekman and...
AT&T Hacker Andrew Auernheimer sentenced to 3.5 Years in prison
Self-described troll and Grey hat AT&T Hacker Andrew "Weev" Auernheimer, 26, has been sentenced to 41 months in prison for exploiting an AT&T security hole three years ago, and releasing thousands of iPad owners email addresses. According to authorities, they obtained the ICC-ID and e-mail addres...
AT&T Hacker Andrew Auernheimer sentenced to 3.5 Years in prison
Self-described troll and Grey hat AT&T Hacker Andrew "Weev" Auernheimer, 26, has been sentenced to 41 months in prison for exploiting an AT&T security hole three years ago, and releasing thousands of iPad owners email addresses. According to authorities, they obtained the ICC-ID and e-mail addres...
Phony T-Mobile, Vodaphone Notifications Duping U.K. Users
Cybercriminals in the United Kingdom this week have launched two separate but similar scams intent on gaining access to users’ computers. Both scams impersonate e-mail notifications from popular British cell phone companies and both ultimately open a backdoor on the targeted computers. E-mail...
PT-2012-5767
Name of the Vulnerable Software and Affected Versions Php-X-Links version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to "rate.php", the cid parameter to "view.php", or the t parameter to "pop.php". Recommendations...
Design/Logic Flaw
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...
CVE-2012-2980: Undefined Security Weakness
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...
PT-2012-4410
Name of the Vulnerable Software and Affected Versions Android affected versions not specified on T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S Description The onTouchEvent method...
T-dah Webmail - Cross-Site Request Forgery Persistent Cross-Site Scripting
T-dah Webmail - Cross-Site Request Forgery Persistent Cross-Site Scripting ----------------------------------------------------------- / | | | | | | | | | | | | | | | | | / |/ |/ \ | | || | || | | | | / | ||\,|,||| ----------------------------------------------------------- T-dah Webmail CSRF &...
T-dah Webmail Multiple Stored XSS
Exploit for php platform in category web applications !/usr/bin/python ''' Exploit Title: T-dah Webmail Multiple Stored XSS issues. Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://tdah.us/ Software Link:...
