CVE-2024-53934

The com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes application through 1.1.2 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivi...

CVE-2024-53936

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

CVE-2024-53931

The CVE-2024-53931 issue affects the Android app com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) up to version 1.1. The vulnerability arises from a crafted Intent targeting com.glitter.caller.screen.DialerActivity that allows any application (no permissions required) to place phone...

BG.Studio Color Phone Call Screen App 安全漏洞

BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen application from BG.Studio, Inc. A security vulnerability exists in BG.Studio Color Phone Call Screen App version 21.1.9 and earlier, which stems from a vulnerability that allows any application...

CVE-2024-53935

CVE-2024-53935 affects the Android app com.callos14.callscreen.colorphone (aka iCall OS17 - Color Phone Flash) ≤ 4.3. The vulnerability lies in the DialerActivity component, where a crafted intent can be sent by any application with no permissions to initiate phone calls without user interaction....

CVE-2024-53932

The com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme application through 21.1.9 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

PT-2025-2999 · Unknown · Com.Remi.Colorphone.Callscreen.Calltheme.Callerscreen

Name of the Vulnerable Software and Affected Versions: com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme versions through 21.1.9 for Android Description: The issue allows any application to place phone calls without user interaction by sending a crafted inte...

PT-2025-3003 · Asianmobile · Com.Asianmobile.Callcolor

Name of the Vulnerable Software and Affected Versions: com.asianmobile.callcolor aka Color Phone Call Screen App version 24 for Android Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

Galaxy studio apps iCall OS17 Color Phone Flash 安全漏洞

Galaxy studio apps iCall OS17 Color Phone Flash is a default dialer application from Galaxy studio apps, Inc. A security vulnerability exists in Galaxy studio apps iCall OS17 Color Phone Flash version 4.3 and earlier, which originates from a crafted intent that can be sent via the...

CVE-2024-53936

The CVE-2024-53936 issue affects the Android app com.asianmobile.callcolor (Color Phone Call Screen App) up to version 24. The vulnerability arises from the CallActivity component, which can be invoked via a crafted intent by any application with no permissions, enabling unauthorized phone calls ...

CVE-2024-53935

The com.callos14.callscreen.colorphone aka iCall OS17 - Color Phone Flash application through 4.3 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callos14.callscreen.colorphone.DialerActivity component...

PT-2025-3002 · Unknown · Com.Callos14.Callscreen.Colorphone

Name of the Vulnerable Software and Affected Versions: com.callos14.callscreen.colorphone also known as iCall OS17 - Color Phone Flash versions 4.3 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

PT-2025-3001 · Unknown · Com.Windymob.Callscreen.Ringtone.Callcolor.Colorphone +1

Name of the Vulnerable Software and Affected Versions: com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes versions 1.1.2 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via th...

CVE-2024-53934

The CVE-2024-53934 issue affects the Color Phone Call Screen Themes app (com.windymob.callscreen.ringtone.callcolor.colorphone) up to version 1.1.2 for Android. A crafted intent to the DialerActivity component (com.frovis.androidbase.call.DialerActivity) enables any other app, with no permissions...

CVE-2024-53931

The com.glitter.caller.screen aka iCaller, Caller Theme & Dialer application through 1.1 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.glitter.caller.screen.DialerActivity component...

CVE-2024-53932

CVE-2024-53932 affects the Android app Color Phone: Call Screen Theme (package com.remi.colorphone.callscreen.calltheme.callerscreen). Through versions up to and including 21.1.9, an attacker can trigger phone calls without user interaction by sending a crafted intent to the component DialerActiv...

CVE-2024-53932

The com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme application through 21.1.9 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

Heels on fire. Hacking smart ski socks

TL;DR A silly-season BLE connectivity story Overheat people’s smart ski socks …but only when in Bluetooth range AND when the owner's phone is out of range of their feet! Having experienced painfully cold feet several times over the years while skiing, including once at minus 42°C in the Canadian...

PT-2024-17267 · WordPress · Feedify – Web Push Notifications

Name of the Vulnerable Software and Affected Versions: The Feedify – Web Push Notifications plugin for WordPress versions up to, and including, 2.4.2 Description: The issue is related to Reflected Cross-Site Scripting via the platform, phone, email, and store url parameters due to insufficient...

WordPress plugin Feedify – Web Push Notifications 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...