AndroidRock Call Blocker has a security vulnerability

AndroidRock Call Blocker is an application from AndroidRock Inc. It can automatically reject unwanted calls. A security vulnerability exists in AndroidRock Call Blocker version 6.6.3, which originates from the fact that an attacker can use the key component to inject a large amount of dirty data...

CVE-2023-29728: Origin Validation Error

The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack...

CVE-2023-29728

The CVE-2023-29728 entry affects Call Blocker for Android (version 6.6.3). The issue is that attackers can tamper with feature-related data, enabling a severe elevation of privilege. This is described consistently across sources (e.g., Red Hat and NVD entries). The likely impact is high (CVE/metr...

CVE-2023-29726

The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, t...

AndroidRock Call Blocker has a security vulnerability

AndroidRock Call Blocker is an application from AndroidRock Inc. It can automatically reject unwanted calls. A security vulnerability exists in AndroidRock Call Blocker version 6.6.3, which stems from an exposed component that deletes private data and can be exploited by an attacker to conduct a...

CVE-2023-29728

The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack...

AndroidRock Call Blocker has a security vulnerability

AndroidRock Call Blocker is an application from AndroidRock Inc. It can automatically reject unwanted calls. A security vulnerability exists in AndroidRock Call Blocker version 6.6.3, which stems from an elevation of privilege that allows an attacker to tamper with feature-related data...

PT-2023-22379 · Unknown · The Call Blocker

Name of the Vulnerable Software and Affected Versions: The Call Blocker application version 6.6.3 Description: The issue allows unauthorized applications to use exposed components to delete data stored in the database related to user privacy settings, affecting the normal functionality of the...

CVE-2023-29728

The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack...

CVE-2023-29727: Insecure Storage of Sensitive Information

The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause...

CVE-2023-29727

The CVE-2023-29727 entry concerns the Android app Call Blocker (version 6.6.3). Multiple connected sources confirm a root cause where exposed components can be invoked by unauthorized applications to delete data in the app’s privacy-related database, which disrupts normal functionality and enable...

CVE-2023-29726

The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, t...

WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Call Now Icon Animate Type Plugin Vulnerable versions = 0.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-34187 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cca3b242a6de Credits Rio Darmawan Requir...

CVE-2023-29726

The CVE-2023-29726 entry describes a vulnerability in Call Blocker for Android 6.6.3 where a component is opened that allows an attacker to inject large volumes of data into the app’s database. On startup, the app loads database data into memory, and injecting excessive data triggers an out‑of‑me...

PT-2023-22380 · Unknown · Call Blocker

Name of the Vulnerable Software and Affected Versions: Call Blocker application version 6.6.3 Description: The issue allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack. Recommendations: For version 6.6.3, update to a newer version that contai...

CVE-2023-29727

The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause...

PT-2023-22378 · Unknown · Call Blocker

Name of the Vulnerable Software and Affected Versions: Call Blocker application version 6.6.3 Description: The issue allows an attacker to inject large amounts of data into the application's database, causing it to crash due to an out-of-memory OOM error when it loads the data into memory on...

CVE-2023-29726: Improper Resource Shutdown or Release

The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, t...

Race condition

Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask call inside archivewritediskposix.c changes the umask of the whole process for a very short period of time; a race condition with another thread can lead to a permanent umask 0 setting. Such a race...

DCE/RPC Process Callaway Code Execution

The vulnerability of the DCE/RPC process callouts system for MacOS operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...