OpenContacts

OpenContacts for Android Privacy to your contacts. Translation Do you want to see this app in your own language, contribute the translations About This app saves contacts in its own database seperate from android contacts. This way no other app would be able to access contacts. Can be used in pla...

CVE-2022-44666

Microsoft Windows Contacts VCF/Contact/LDAP syslink control href attribute escape vulnerability CVE-2022-44666 0day. This is the story about another forgotten 0day fully disclosed more than 4 years ago by John Page aka hyp3rlinxR.1. To understand the report, you have to consider i'm stupid :- And...

CVE-2026-0075

CVE-2026-0075 ContactsProvider 연구 PoC ContactsProvider2의 CVE-2026-0075와 관련된 관찰 가능한 동작을 평가하기 위한 제어된 실험실 Android 연구 프로토타입입니다. 개요 CVE-2026-0075는 ContactsProvider2의 Android 로컬 권한 상승 문제입니다. 공개 보안 권고는 사용자 상호 작용 없이 SQL 인젝션을 통해 연락처 데이터베이스에 접근할 수 있는 경로를 설명합니다. Android는 이 문제를 높음High 으로 분류하고 Android 14, 15,...

CVE-2026-97644

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via Contact Identity Rebinding in all versions up to, and including, 4.9 The vulnerability exists because the createcontact function in the v3 REST endpoint POST /gh/v3/contacts ...

CVE-2026-97644

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 4.9 . The flaw exists because the create_contact function in the v3 REST endpoint (POST /gh/v3/contacts) is only gated by the add_contacts cap...

PT-2026-104494

Name of the Vulnerable Software and Affected Versions Groundhogg — CRM, Newsletters, and Marketing Automation versions prior to 5.0 Description Privilege escalation is possible through contact identity rebinding. The create contact function in the POST /gh/v3/contacts endpoint is only protected b...

cve-2026-28576

CVE-2026-28576: Android Contacts Provider SQL 인젝션 및 체계적 유출 개요 CVE-2026-28576 은 Android Contacts Provider 프레임워크ContactsProvider2.queryLocal의 치명적인 접근 제어 취약점입니다. 이 결함은 선언된 권한이 전혀 없는 로컬에 설치된 비특권 애플리케이션이 전체 이름, 전화번호, 우편 주소, 이메일 주소를 포함한 기기의 전체 연락처 데이터베이스를 유출할 수 있게 합니다. 속성| 값 ---|--- CVE ID|...

CVE-2026-28576-poc

CVE-2026-28576: Android 연락처 제공자Contacts Provider의 SQL 인젝션 하나의 연락처를 선택했을 뿐인데 모든 연락처가 노출됩니다: targetSdk 호환성 게이트가 단일 연락처 선택기 권한을 전체 연락처 데이터베이스 덤프로 바꿔버립니다. Android 17은 setStrictColumns / setStrictGrammar를 통해 연락처 제공자Contacts Provider를 SQL 인젝션으로부터 강화했습니다. 그러나 이 강화는 targetSdk 기반 호환성...

CVE-2026-87605

A flaw was found in Google Chrome's Contacts feature. A remote attacker, after compromising the renderer process and employing social engineering tactics, could potentially exploit this missing authorization. This could allow the attacker to obtain sensitive user information by tricking a user in...

CVE-2026-9004 WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter

The WP-CRM System – Manage Clients and Projects plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.6 via the 'contactid' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract...

Exploit for SQL Injection in Google Android

CVE-2026-28576 Red Team Tool Zero-permission contacts exfil...

Chromium CVE-2026-87605: Missing authorization in Contacts

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-90495: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance-findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads to sql injection. The attack can be...

PT-2026-89451

import contacts Path Traversal in Groundhogg = 4.7.1 versions...

DEBIAN-CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...