CVE-2019-12664

Cisco IOS XE Software on Cisco 4000 Series ISRs has a data leak vulnerability in the Dialer interface for ISDN, due to insufficient validation of IPCP state. An unauthenticated adjacent attacker can pass IPv4 traffic through an ISDN channel before PPP authentication succeeds, either by placing an...

PT-2019-3336 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers ISRs affected versions not specified Description: A vulnerability in the Dialer interface feature for ISDN connections could allow an unauthenticated, adjacent attacker t...

CVE-2019-2125

In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation of privilege, granting privileges to a local app without the user's informed consent, with no additional privileges needed. User interaction is needed for...

Cross site scripting

There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON-Auto-Dialer-Agents-Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacker can execute arbitrary HTML and script code in a browser in the context of the vulnerable applicati...

CVE-2018-11552

There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON-Auto-Dialer-Agents-Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacker can execute arbitrary HTML and script code in a browser in the context of the vulnerable applicati...

CVE-2018-11552

AXON PBX 2.02 contains a reflected XSS in the Name field under AXON→Auto-Dialer→Agents. The issue stems from insufficient filtering of user-supplied data, allowing a remote attacker to execute arbitrary HTML/script in the victim’s browser. Multiple connected sources (NVD/CNVD/packetstorm referenc...

AXON PBX 2.02 Cross Site Scripting

Aloha, 1. Introduction Vendor: NCH Software Affected Product: AXON PBX - 2.02 Vendor Website: http://www.nch.com.au/pbx/index.html Vulnerability Type: Reflected XSS Remote Exploitable: Yes CVE ID: CVE-2018-11552 2. Overview There is a reflected XSS vulnerability in AXON PBX Web interface. The...

Android Auto Dialer Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. There is a security vulnerability in Android Auto Dialer. The vulnerability arises because the system-level Intent mechanism "android.intent.action.CALL" defined in...

Android Emergency Dialing Initiation Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Android's emergency dialing activation feature. The vulnerability is caused by the system-level Intent mechanism...

Dialer + - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Dialer + published at the 'play' market has multiple vulnerabilities...

iOS WebView Problem Allows Attackers to Initiate Phone Calls

iOS developers who have embedded Apple’s WebView into mobile apps need to be aware of an exploitable issue that could allow phone calls to a number of the attacker’s choosing. Researcher Collin Mulliner said the vulnerability is trivial to exploit, requiring at a minimum one line of HTML code. Th...

Android OS Contacts app fails to restrict access permissions

Overview The Contacts app within the Android OS contains a vulnerability where it fails to restrict access permissions. The Contacts app within the Android OS receives requests for outgoing calls through Intents and calls the Dialer app. The Contacts app contains a vulnerability where it fails to...

Contacts & Dialer by drupe - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Contacts & Dialer by drupe published at the 'play' market has multiple vulnerabilities...

Quick Dialer. - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Quick Dialer. published at the 'play' market has multiple vulnerabilities...

KK Phone (KK Dialer, Lollipop) - Customized SSL, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application KK Phone KK Dialer, Lollipop published at the 'play' market has multiple vulnerabilities...

Simpler Dialer - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Simpler Dialer published at the 'play' market has multiple vulnerabilities...

Caller Screen Dialer Caller ID - Dangerous filesystem permissions, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Caller Screen Dialer Caller ID published at the 'play' market has multiple vulnerabilities...

Dialer One – free smart dialer - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Dialer One – free smart dialer published at the 'play' market has multiple vulnerabilities...

DW Contacts & Phone & Dialer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DW Contacts & Phone & Dialer published at the 'play' market has multiple vulnerabilities...

PP – Dialer and Contacts - Base64 encoded String, Corrupted files, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application PP – Dialer and Contacts published at the 'play' market has multiple vulnerabilities...