37 matches found
CVE-2025-23745
Cross-Site Request Forgery CSRF vulnerability in Tussendoor B.V. Call me Now call-me-now allows Stored XSS.This issue affects Call me Now: from n/a through = 1.0.5...
EUVD-2025-3383
Malicious code in bioql PyPI...
EUVD-2023-36845
Malicious code in bioql PyPI...
CVE-2023-32602
Cross-Site Request Forgery CSRF vulnerability in LOKALYZE CALL ME NOW plugin = 3.0 versions...
Forever CALL ME KW-50 安全漏洞
Forever CALL ME KW-50 is a children's phone watch from Forever. A security vulnerability exists in the Forever CALL ME KW-50 version R36YDRA3PWGM7SV1.02019071516.19.24cobh, which stems from vulnerability to MITM attacks...
CVE-2024-36557: Authentication Bypass by Spoofing
The device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb. If a malicious user changes the IMEI to the IMEI of a unit they registered in the mobile app, it is possible to...
CVE-2024-36553: Channel Accessible by Non-Endpoint
Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh is vulnerable to MITM attack...
PT-2025-5845 · Forever · Forever Kidswatch Call Me Kw50 +1
Name of the Vulnerable Software and Affected Versions: Forever KidsWatch Call Me KW-50 version R36 YDR A3PW GM7S V1.0 2019 07 15 16.19.24 cob h Forever KidsWatch Call Me KW-60 version R36CW YDE S4 A29 2 V1.0 2023.05.24 22.49.44 cob b Description: The issue allows a malicious user to obtain...
Forever CALL ME KW-50和Forever CALL ME KW-60 安全漏洞
The Forever CALL ME KW-50 and Forever CALL ME KW-60 are both children's phone watches from Forever. Forever CALL ME KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh version and Forever CALL ME KW-60 R36CWYDES4A292V1.02023.05.2422.49.44 A security vulnerability exists in the cobb version, which stems...
Forever CALL ME KW-50 安全漏洞
Forever CALL ME KW-50 is a children's phone watch from Forever. Forever CALL ME KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh version and Forever KidsWatch Call Me KW-60 R36CWYDES4A292V1.02023.05.24 A security vulnerability exists in version 22.49.44cobb. An attacker can exploit the vulnerability ...
CVE-2024-36553
Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh is vulnerable to MITM attack...
CVE-2024-36558: Cleartext Transmission of Sensitive Information
Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh suffers from Cleartext Transmission of Sensitive Information due to lack of encryption in device-server communication...
CVE-2024-36556: Use of Hard-coded Credentials
Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh, and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb have a Hardcoded password vulnerability...
CVE-2024-36555: Missing Authentication for Critical Function
Built-in SMS-configuration command in Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me 2 KW-60 R36CWYDES4A292V1.02023.05.2422.49.44cobb allows malicious users to change the device IMEI-number which allows for forging the identity of the device...
CVE-2024-36554: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me KW-60 R36CWYDES4A292V1.02023.05.2422.49.44cobb allow a malicious user to gain information about the device by sending an SMS to the device which returns sensitive information...
PT-2025-5842 · Unknown · Forever Kidswatch Call Me Kw50
Name of the Vulnerable Software and Affected Versions: Forever KidsWatch Call Me KW-50 version R36 YDR A3PW GM7S V1.0 2019 07 15 16.19.24 cob h Description: The issue concerns a Man-In-The-Middle MITM attack. A MITM attack is a type of cyber attack where an attacker intercepts and alters...
CVE-2025-23745
Cross-Site Request Forgery CSRF vulnerability in Tussendoor B.V. Call me Now call-me-now allows Stored XSS.This issue affects Call me Now: from n/a through = 1.0.5...
CVE-2025-23745
CVE-2025-23745 describes a CSRF vulnerability in the WordPress plugin “Call me Now” that can trigger a Stored XSS. The description states affected versions are from n/a up to 1.0.5. Connected Red Hat advisory RH:CVE-2025-23745 repeats this fault, confirming the issue location as Call me Now. The ...
CVE-2025-23745 WordPress Call me Now plugin <= 1.0.5 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Tussendoor B.V. Call me Now call-me-now allows Stored XSS.This issue affects Call me Now: from n/a through = 1.0.5...
