CVE-2016-0847

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502...

CVE-2016-0847

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502...

Design/Logic Flaw

server/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider whether a device is provisioned, which allows physically proximate attackers to bypass the Factory Reset Protection protection...

Code injection

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502...

UBUNTU-CVE-2016-0847

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502...

CVE-2016-0847

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502...

CVE-2016-0847

The CVE affects the Android Telecom component on Android 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-04-01). The issue allows a crafted app with Signature or SignatureOrSystem access to spoof the originating telephone number of a call. The impact is limited to local attacker ...

globe-telecom.hosted.jivesoftware.com XSS vulnerability

Vulnerable URL: https://globe-telecom.hosted.jivesoftware.com/community/welcome/guide/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2016 Latest check for...

Android Telecom Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Telecom is one of the communication components. An elevation of privilege vulnerability exists in the Telecom component of Android. An attacker could exploit this...

Telecom Charging Panel ADSL (IR) - CSRF Web Vulnerability

Document Title: =============== Telecom Charging Panel ADSL IR - CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1773 Release Date: ============= 2016-03-01 Vulnerability Laboratory ID VL-ID: ==================================== 17...

Telecom Charging Panel ADSL (IR) - CSRF Web Vulnerability

Document Title: =============== Telecom Charging Panel ADSL IR - CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1773 Release Date: ============= 2016-03-01 Vulnerability Laboratory ID VL-ID: ==================================== 17...

118 Telecom Cross Site Scripting

----------------------------------------------------------------------------------- Exploit Title : 118 Telecom's website of Iran XSS Vulnerability Exploit Author : 4TT4CK3R HomePage : http://118.tct.ir Tested on : Windows , Firefox Discovered by : 4TT4CK3R Category : WebApp Date : 2016/01/22...

Multi protocol Test Suite

MTS Multi protocol Test Suite is a multi protocol testing tool specially designed for telecom IP-based architectures. With MTS Multi protocol Test Suite you get the powerful tool to: Test protocols with functional and regression tests Test load endurance and stress tests Simulate all network...

Huawei Wimax CSRF / Information Disclosure / Manipulation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Huawei Wimax routers vulnerable to multiple threats Advisory URL: https://pierrekim.github.io/advisories/2015-huawei-0x01.txt Blog URL:...

Today NSA has Stopped its Bulk Phone Surveillance Program

Rejoice! From this morning, you can call freely to anyone, talk anything without any fear of being spied by the United States National Security Agency NSA, as the agency is not allowed to collect bulk phone records. Until now we all are aware of the NSA's bulk phone surveillance program – thanks ...

telecom-sudparis.eu XSS vulnerability

Vulnerable URL: http://www.telecom-sudparis.eu/pfrformationspost-gradechercher-pg1186.html Details: Description| Value ---|--- Patched:| Yes, at 30.10.2015 Latest check for patch:| 30.10.2015 16:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 557477 Google...

Threat Outbreak Alert RuleID17700: Email Messages Distributing Malicious Software on September 2, 2015

Medium Alert ID: 40822 First Published: 2015 September 2 20:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17700 may contain the following files: Name |...

China Telecom's Wing Pay App Has Multiple Vulnerabilities

Wing Pay is the business brand of China Telecom that operates payment and internet finance. Wing Pay APP 3.9.6 has multiple security vulnerabilities, including: global file read/write vulnerability; configuration file read/write vulnerability; trust arbitrary security certificate vulnerability;...

NSA to Destroy Bulk Collection of Surveillance Data

The National Security Agency will restrict access to, and ultimately destroy, millions of US phone records previously collected by the spy agency, the Office of the Director of National Intelligence ODNI announced Monday. The federal law was passed in June ending the NSA’s bulk collection of U.S...

INFOMARK IMW-C920W miniupnpd 1.0 - Denial of Service Vulnerability

MiniUPNPd version 1.0 remote denial of service exploit. !/usr/bin/perl miniupnpd/1.0 remote denial of service exploit Copyright 2015 c Todor Donev email protected http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg The SSDP protocol can discover Plug & Play devices, with uPnP...