1305 matches found
Unprotected VOIP Server Exposed Millions of SMS Messages, Call Logs
A California-based Voice-Over-IP VoIP services provider VOIPO has accidentally left tens of gigabytes of its customer data, containing millions of call logs, SMS/MMS messages, and plaintext internal system credentials, publicly accessible to anyone without authentication. VOIPo is one of a leadin...
Cisco VoIP Script Insertion / Weak Passwords / Undocumented Functionality
Cisco VoIP phone such as models 88XX suffer from script insertion, weak and hard-coded passwords, undocumented debug functionality, and various outdated components with known vulnerabilities. ======================================================================= title: Multiple Vulnerabilities...
Cisco VoIP Script Insertion / Weak Passwords / Undocumented Functionality
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Cisco VoIP Phones, e.g. models 88XX vulnerable version: See list of vulnerable devices/firmwares below fixed version: 12.5.1 MN CVE...
CVE-2018-18871
Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker in the same network as the device to change the admin password without authentication and without knowing the original password...
Default credentials
Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker in the same network as the device to change the admin password without authentication and without knowing the original password...
CVE-2018-18871
CVE-2018-18871 affects Gigaset Maxwell Basic VoIP phones (firmware 2.22.7). The web interface lacks password verification, allowing a remote attacker on the same network to change the admin password without authentication. This is a network-accessible issue with high impact to confidentiality and...
Delivering Softphones with Virtual Apps and Desktops
This article describes a generic approach to delivering softphones and voice chat applications with Citrix Virtual Apps and Desktops CVAD7.x. 1. Alternatives for Delivering Softphones CVADsupport several alternatives for delivering softphones. Control mode , where the hosted published softphone i...
SolarWinds VoIP and Network Quality Manager (VNQM) Detection (Windows SMB Login)
SMB login-based detection of SolarWinds VoIP and Network Quality Manager VNQM. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cloud communication firm exposes millions of sensitive text messages to public access
By Waqas There’s bad news for those who rely upon SMS-based 2FA authentication. A Berlin-based security researcher Sébastien Kaul has revealed that Voxox exposed a huge database containing tens of millions of text messages by storing it on an unprotected server. The VOIP and Cloud communication f...
CVE-2018-15497
The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue remotely, by sending a particular pattern of SIP/SDP packets, to cause a denial of service state in the affected devices and probably remote...
Remote code execution
The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue remotely, by sending a particular pattern of SIP/SDP packets, to cause a denial of service state in the affected devices and probably remote...
CVE-2018-15497
The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue remotely, by sending a particular pattern of SIP/SDP packets, to cause a denial of service state in the affected devices and probably remote...
CVE-2018-15497
Mitel MiVoice 5330e VoIP device is affected by memory corruption in the SIP/SDP packet handling. A remote attacker can trigger this by sending specially crafted SIP/SDP packets, leading to a denial of service state and likely remote code execution. Supported details indicate the issue resides in ...
Collaboration Compliance And Quality Management Platform 9.1.1.5482 Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2018-023 Product: Collaboration Compliance and Quality Management Platform Manufacturer: Verint Verba Affected Versions: = 9.1.1.5482 Tested Versions: 9.1.1.5482 Vulnerability Type: Improper Access Control CWE-284 Risk Level: Mediu...
Collaboration Compliance And Quality Management Platform 9.1.1.5482 Improper Access Control
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2018-024 Product: Collaboration Compliance and Quality Management Platform Manufacturer: Verint Verba Affected Versions: = 9.1.1.5482 Tested Versions: 9.1.1.5482 Vulnerability Type: Improper Access Control CWE-284 Risk Level: Mediu...
[SECURITY] Fedora 29 Update: matrix-synapse-0.33.3.1-1.fc29
Matrix is an ambitious new ecosystem for open federated Instant Messaging a nd VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is inten ded to showcase the concept of Matrix and let folks see the spec i...
Multiple AVM FRITZ!Box VoIP Remote Denial of Service Vulnerability
Multiple AVM FRITZ!Box devices are prone to a Denial of Service. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:avm:fritz%21os";...
[SECURITY] Fedora 28 Update: matrix-synapse-0.33.3.1-1.fc28
Matrix is an ambitious new ecosystem for open federated Instant Messaging a nd VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is inten ded to showcase the concept of Matrix and let folks see the spec i...
Why Enterprises Still Have to Worry about Eavesdropping
When one thinks about eavesdropping, a mental image of a shadowy stranger, hiding behind a corner and listening in on others' conversations may come to mind. With the rise of VoIP calling, however, enterprises became aware of digital eavesdropping that impacted their corporate business calls. Now...
