CVE-2017-14098

In the pjsip channel driver respjsip in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash...

CVE-2017-14098

In the pjsip channel driver respjsip in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash...

CVE-2017-14098

CVE-2017-14098 affects the Asterisk pjsip channel driver (res_pjsip). A specially crafted tel URI in a From, To, or Contact header can cause Asterisk to crash. Affected versions are Asterisk 13.x prior to 13.17.1 and 14.x prior to 14.6.1. The vulnerability is demonstrated by crash behavior withou...

Digium Asterisk Denial of Service Vulnerability (CNVD-2017-30817)

Digium Asterisk is a set of open source telephone exchange PBX system software from Digium, USA. The software supports voicemail , multi-party voice conferencing , interactive voice response IVR , etc. pjsip channel driver respjsip is one of the pjsip driver . A security vulnerability exists in t...

BlueHat IL 2017 Announced

Microsoft is thrilled to announce BlueHat IL 2017. This will mark the first time BlueHat is held in Tel Aviv and it will take place on January 24-25, 2017. Given its location, Israel further serves as a harness which draws in researchers from across Europe, Asia and the Middle East...

The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a phone number collection event without the user’s permission.

The vulnerability of the Reminders component in the Mac OS X operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, acting remotely, to trigger a phone number collection event without user permission by clicking on the “tel” link...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

Design/Logic Flaw

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

CVE-2016-1770

The CVE-2016-1770 issue affects the Reminders component in OS X El Capitan prior to 10.11.4. Root cause: a tel: URL triggering a dialing action without user confirmation due to insufficient entitlement checks. Impact: ability to trigger a call without prompting the user. Mitigation: Apple release...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

Vulnerability in OpenSSL - Side channel attack on modular exponentiation

A side-channel attack was found which makes use of cache-bank conflicts on the Intel Sandy-Bridge microarchitecture which could lead to the recovery of RSA keys. The ability to exploit this issue is limited as it relies on an attacker who has control of code in a thread running on the same...

tel-supplier-china.com XSS vulnerability

Open Bug Bounty ID: OBB-101358 Description| Value ---|--- Affected Website:| tel-supplier-china.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

UBUNTU-CVE-2015-5820

WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted 1 tel://, 2 facetime://, or 3 facetime-audio:// URL...

tel-mobile.su XSS vulnerability

Vulnerable URL: http://tel-mobile.su/search?a=0=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E&=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:|...

How to Hack into Computers using Pita Bread and A Radio

There's a new and clever way of hacking into computers, and it can be done cheaply – Using just a radio receiver and a piece of pita bread. Yeah, you heard it right. Security researchers at Tel Aviv University have demonstrated how to extract secret decryption keys from computers by capturing rad...

DLA-190-1 libgcrypt11 - security update

Bulletin has no description...

53KF某重要站点任意文件读取

简要描述： 详细说明： 网站：tel.53kf.com controller可控 request： GET /external.php?controller=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00web&style=61565627-4006633536-103387129 HTTP/1.1 User-Agent: Mozilla/5.0 Windows; U; Windows NT 6.1; en-US Accept: /...

Jolla Phone URI Spoofing

-------------------------- NSOADV-2015-001 --------------------------- Jolla Phone tel URI Spoofing 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 111 111001 111111111 0 10 111...

Debian DSA-3185-1 : libgcrypt11 - security update

Multiple vulnerabilities were discovered in libgcrypt : - CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite noticeable impact on...

Debian Security Advisory DSA 3185-1 (libgcrypt11 - security update)

Multiple vulnerabilities were discovered in libgcrypt: CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite noticeable impact on...