tcPbX - tcpbx_lang Local File Inclusion

tcPbX - tcpbxlang Local File Inclusion Vulnerable hardware : tcpbx voip distro Vendor : www.tcpbx.org Author : Ahmed sultan @0x4148 Email : [email protected] Summary : According to the vendor's site , tcPbX is a complete and functional VoIP phone system based on Asterisk open source software and...

ZYCOO IP Phone System - Remote Command Execution

ZYCOO IP Phone System - Remote Command Execution Vulnerable hardware : ZYCOO IP phone system Vendor : zycoo.com Author : Ahmed sultan @0x4148 Email : [email protected] Summary : According to the vendor's site , CooVox Series IP Phone System is the most innovative solution for VoIP telecommunicatio...

ZYCOO IP Phone System - Remote Command Execution

Exploit for cgi platform in category web applications Vulnerable hardware : ZYCOO IP phone system Vendor : zycoo.com Author : Ahmed sultan @0x4148 Email : email protected Summary : According to the vendor's site , CooVox Series IP Phone System is the most innovative solution for VoIP...

tcPbX - 'tcpbx_lang' Local File Inclusion

Vulnerable hardware : tcpbx voip distro Vendor : www.tcpbx.org Author : Ahmed sultan @0x4148 Email : [email protected] Summary : According to the vendor's site , tcPbX is a complete and functional VoIP phone system based on Asterisk open source software and CentOS operating system. The simplified...

ZYCOO IP Phone System - Remote Command Execution

Vulnerable hardware : ZYCOO IP phone system Vendor : zycoo.com Author : Ahmed sultan @0x4148 Email : [email protected] Summary : According to the vendor's site , CooVox Series IP Phone System is the most innovative solution for VoIP telecommunication in SMB Small and Medium-sized Business market...

tcPbX - 'tcpbx_lang' Local File Inclusion

Exploit for php platform in category web applications Vulnerable hardware : tcpbx voip distro Vendor : www.tcpbx.org Author : Ahmed sultan @0x4148 Email : email protected Summary : According to the vendor's site , tcPbX is a complete and functional VoIP phone system based on Asterisk open source...

Using VPN in the UAE? You'll Be Fined Up To $545,000 If Get Caught!

If you get caught using a VPN Virtual Private Network in Abu Dhabi, Dubai and the broader of United Arab Emirates UAE, you could face temporary imprisonment and fines of up to $545,000 Dhs2 Million. Yes, you heard that right. Online Privacy is one of the biggest challenges in today's interconnect...

End of SMS-based 2-Factor Authentication; Yes, It's Insecure!

SMS-based Two-Factor Authentication 2FA has been declared insecure and soon it might be a thing of the past. Two-Factor Authentication or 2FA adds an extra step of entering a random passcode sent to you via an SMS or call when you log in to your account as an added layer of protection. For exampl...

AT&T VoIP - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application AT&T VoIP published at the 'play' market has multiple vulnerabilities...

Linknat VOS3000/VOS2009 SQL Injection

A SQL injection was found in Linknat VOS3000/VOS2009, a popular VoIP softswitch, that could allow remote attackers to gain access to the credentials stored in plain-text. Application: Linknat VOS3000/VOS2009 Versions Affected: 2.1.1.5, 2.1.1.8, 2.1.2.0 Vendor URL: http://www.linknat.com/ Bug: SQL...

Plumble - Mumble VOIP (Free) - Customized SSL, Insecure KeyStore, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Plumble - Mumble VOIP Free published at the 'play' market has multiple vulnerabilities...

WiCall : VoIP call, Wifi call - BSD license, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application WiCall : VoIP call, Wifi call published at the 'play' market has multiple vulnerabilities...

Zoiper IAX SIP VOIP Softphone - Certificates or keys found, Customized SSL, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application Zoiper IAX SIP VOIP Softphone published at the 'play' market has multiple vulnerabilities...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure disabling VoIP services by usi...

Kamailio 4.3.4 - Heap Buffer Overflow

census ID: census-2016-0009 CVE ID: CVE-2016-2385 Affected Products: Kamailio 4.3.4 and possibly previous versions Class: Heap-based Buffer Overflow CWE-122 Remote: Yes Discovered by: Stelios Tsampas Kamailio successor of former OpenSER and SER is an Open Source SIP Server released under GPL, abl...

Kamailio 4.3.4 - Heap Based Buffer Overflow

Exploit for linux platform in category dos / poc CVE ID: CVE-2016-2385 Affected Products: Kamailio 4.3.4 and possibly previous versions Class: Heap-based Buffer Overflow CWE-122 Remote: Yes Discovered by: Stelios Tsampas Kamailio successor of former OpenSER and SER is an Open Source SIP Server...

D-Link DVG-5402SP CSRF / Brute Force

Hello list! There are Brute Force, Abuse of Functionality and Cross-Site Request Forgery vulnerabilities in D-Link DVG-5402SP VoIP Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DVG-5402SP, Firmware RU1.01. Other versions also...

innovaphone IP222 11r2 sr9 Brute Force

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-018 Product: innovaphone IP222 Manufacturer: innovaphone AG Affected Versions: 11r2 sr9 Tested Versions: 11r2 sr9 Vulnerability Type: Improper Restriction of Excessive Authentication Attempts CWE-307 Risk Level: Medium Solutio...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

CVE-2016-1338

Cisco TelePresence VCS (X8.5.1 and X8.5.2) is affected by a SIP message handling vulnerability that lets remote authenticated attackers cause a DoS (VoIP outage) via a crafted SIP message (Bug CSCuu43026). The root cause is incorrect SIP message processing. Impact is denial of service to VoIP cal...