CVE-2025-24145

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.3, iOS 18.3 and iPadOS 18.3. An app may be able to view a contact's phone number in system logs...

PT-2025-5314 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description: A privacy issue was addressed with improved private data redaction for log entries. An app may be able to view a contact's phone number...

CVE-2024-12857

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user's identity prior to logging them in as that user. This makes it possible for unauthenticated attackers to authenticate as an...

PT-2025-1970 · WordPress · Adforest

Name of the Vulnerable Software and Affected Versions: AdForest theme for WordPress versions up to, and including, 5.1.8 Description: The AdForest theme for WordPress is vulnerable to authentication bypass due to the plugin not properly verifying a user's identity prior to logging them in as that...

CVE-2025-0403

A vulnerability, which was classified as problematic, has been found in 1902756969 reggie 1.0. Affected by this issue is some unknown functionality of the file /user/sendMsg of the component Phone Number Validation Handler. The manipulation of the argument code leads to information disclosure. Th...

CVE-2025-0403

A vulnerability, which was classified as problematic, has been found in 1902756969 reggie 1.0. Affected by this issue is some unknown functionality of the file /user/sendMsg of the component Phone Number Validation Handler. The manipulation of the argument code leads to information disclosure. Th...

CVE-2025-0403 1902756969 reggie Phone Number Validation sendMsg information disclosure

A vulnerability, which was classified as problematic, has been found in 1902756969 reggie 1.0. Affected by this issue is some unknown functionality of the file /user/sendMsg of the component Phone Number Validation Handler. The manipulation of the argument code leads to information disclosure. Th...

CVE-2025-0403 1902756969 reggie Phone Number Validation sendMsg information disclosure

A vulnerability, which was classified as problematic, has been found in 1902756969 reggie 1.0. Affected by this issue is some unknown functionality of the file /user/sendMsg of the component Phone Number Validation Handler. The manipulation of the argument code leads to information disclosure. Th...

CVE-2025-0403

CVE-2025-0403 affects the 1902756969/reggie 1.0 application. The vulnerability exists in the File /user/sendMsg of the Phone Number Validation Handler, where manipulation of the code argument leads to information disclosure. The issue is exploitable remotely and has been disclosed publicly. Multi...

PT-2025-3874 · Reggie · Reggie

Name of the Vulnerable Software and Affected Versions: 1902756969 reggie version 1.0 Description: A problem has been found in the Phone Number Validation Handler component, affecting some unknown functionality of the file /user/sendMsg. The manipulation of the code argument leads to information...

The vulnerability of the Ruijie Reyee OS, related to deficiencies in data storage, allows a perpetrator to match the device serial number with the user’s phone number and a portion of the email address.

The vulnerability of the Ruijie Reyee OS is related to deficiencies in the storage of service data. Exploiting this vulnerability allows a malicious actor to match the device serial number with the user’s phone number and part of the email address...

CVE-2024-47043

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address...

PT-2024-9567 · Ruijie · Ruijie Reyee Os

Name of the Vulnerable Software and Affected Versions: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x Description: The issue is related to insufficient storage of service data in the Ruijie Reyee OS, which could allow a remote attacker to correlate a device's serial number with...

CVE-2024-10155

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been classified as problematic. This affects an unknown part of the file book-boat.php?bid=1 of the component Book a Boat Page. The manipulation of the argument phonenumber leads to cross site scripting. It is possible to...

CVE-2024-10155

The CVE-2024-10155 entry affects PHPGurukul Boat Booking System 1.0, specifically the Book a Boat Page component, in file book-boat.php?bid=1. The vulnerability arises from manipulation of the phone_number parameter, enabling cross-site scripting (XSS) and allowing remote initiation of attacks. P...

CVE-2024-10155 PHPGurukul Boat Booking System Book a Boat Page book-boat.php cross site scripting

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been classified as problematic. This affects an unknown part of the file book-boat.php?bid=1 of the component Book a Boat Page. The manipulation of the argument phonenumber leads to cross site scripting. It is possible to...

PT-2024-16068 · Unknown · Phpgurukul Boat Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Boat Booking System version 1.0 Description: A vulnerability was found in the PHPGurukul Boat Booking System. It affects an unknown part of the file book-boat.php?bid=1 of the component Book a Boat Page. The manipulation of the pho...

PHPGurukul Boat Booking System 跨站脚本漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A cross-site scripting vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which stems from a cross-site scripting flaw in the phonenumber parameter in the book-boat.php?bid=1 page of the Book a Boat...

CVE-2024-9861

CVE-2024-9861 affects the Miniorange OTP Verification with Firebase WordPress plugin. Versions up to and including 3.6.0 fail to validate the OTP login token, enabling unauthenticated attackers to log in as any existing user (e.g., admin) if they know that user’s phone number. Multiple sources co...

WordPress Login with phone number plugin <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation vulnerability

Authenticated Subscriber+ Authorization Bypass to Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin Login with phone number versions = 1.7.49...