53 matches found
CVE-2023-40644
In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of permission checking in Messaging. An attacker could exploit this vulnerability to cause information leakage...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of permission checking in Messaging. An attacker could exploit this vulnerability to cause information leakage...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of permission checking in Messaging. An attacker could exploit this vulnerability to cause information leakage...
PT-2023-27565 · Messaging · Messaging
Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...
PT-2023-27569 · Messaging · Messaging
Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...
CVE-2023-44129
The vulnerability is that the Messaging "com.android.mms" app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by launching this activity and then sending a...
Google Android Denial of Service Vulnerability (CNVD-2023-07664)
Google Android is a Linux-based open-source operating system from the US company Google. Google Android suffers from a denial-of-service vulnerability, which is caused by a flaw in messaging. By sending a specially crafted request, an attacker can exploit this vulnerability to cause a denial of...
CVE-2022-40287
The application was found to be vulnerable to an authenticated Stored Cross-Site Scripting XSS vulnerability in messaging functionality, leading to privilege escalation or a compromise of a targeted account...
CVE-2022-40287
The CVE-2022-40287 entry refers to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in PHP Point of Sale, version 19.0, within the messaging functionality. The available connected documents confirm the vulnerability allows privilege escalation or compromise of a targeted account v...
CVE-2022-20438
In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242259920...
PT-2022-14664 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue concerns an unauthorized broadcast in the Messaging component of Android, potentially leading to a Local Deny of Service. Recommendations: At the moment, there is no information...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from the US company Google. A security vulnerability exists in Google Android 13, which stems from the failure to properly perform input validation during its messaging process. An attacker can attach files to messages without performin...
SAMSUNG Mobile devices CSC application 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung SAMSUNG, including cell phones, tablets, and more. An information disclosure vulnerability exists in the CSC application in SAMSUNG Mobile devices, which originates from the CSC exposing sensitive...
Use After Free
chromium is vulnerable to use-after-free. The vulnerability exists in messaging which allows an attacker to cause a heap corruption and leading to an application crash...
CVE-2021-39740
In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID...
Google Android 输入验证错误漏洞
Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that results from improper input validation in messaging. An attacker could use this vulnerability to obtain sensitive information...
Online Discussion Forum Site 1.0 Cross Site Scripting
Exploit Title: Online Discussion Forum Site 1.0 - XSS in Messaging System Google Dork: N/A Date: 2020-10-17 Exploit Author: j5oh Vendor Homepage: https://www.sourcecodester.com/php/14233/online-discussion-forum-site.html Software Link:...
RHEL 7 : dbus (RHSA-2020:4032)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4032 advisory. D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session...
Denial Of Service (DoS)
Red Hat Enterprise MRG Messaging, Realtime, and Grid is a next-generation IT infrastructure for enterprise computing. MRG offers increased performance, reliability, interoperability, and faster computing for enterprise customers. The Qpid packages provide a message broker daemon that receives,...