9 matches found
CVE-2026-9818
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2015-4369
Malware in sbrugna...
You lost your iPhone, but it’s locked. That’s fine, right?
TL;DR Default iOS configuration leaves your locked device vulnerable Ensure your emergency contacts are set. Use ‘FindMy’ to track / wipe lost devices. Take regular backups. Consider turning off the lock screen message previews. Introduction Picture this: you've lost your iPhone. Luckily, it's...
CVE-2023-1777 Information disclosure in linked message previews
Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost API call, disclosing the contents of the linked message...
CVE-2015-4346
Cross-site scripting XSS vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send to phone" submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to message previews...
Cross site scripting
Cross-site scripting XSS vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send to phone" submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to message previews...
CVE-2015-4346
Cross-site scripting XSS vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send to phone" submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to message previews...
PT-2015-6528
Name of the Vulnerable Software and Affected Versions Drupal SMS Framework module versions 6.x-1.x before 6.x-1.1 Description A cross-site scripting XSS issue exists in the SMS Framework module for Drupal. This occurs when the "Send to phone" submodule is enabled, allowing remote attackers to...
CVE-2015-4346: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send to phone" submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to message previews...