CVE-2024-53933

The com.callerscreen.colorphone.themes.callflash aka Color Call Theme & Call Screen application through 1.0.7 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53934

The Color Phone Call Screen Themes application (com.windymob.callscreen.ringtone.callcolor.colorphone) for Android, version 1.1.2 and earlier , contains a vulnerability that allows unauthorized phone calls. An attacker can trigger these calls without user interaction by sending a crafted intent t...

PT-2025-3003 · Asianmobile · Com.Asianmobile.Callcolor

Name of the Vulnerable Software and Affected Versions: com.asianmobile.callcolor aka Color Phone Call Screen App version 24 for Android Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53935

The com.callos14.callscreen.colorphone aka iCall OS17 - Color Phone Flash application through 4.3 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callos14.callscreen.colorphone.DialerActivity component...

CVE-2024-53935

The iCall OS17 - Color Phone Flash (com.callos14.callscreen.colorphone) application for Android, versions 4.3 and earlier , contains a vulnerability that allows unauthorized phone calls. An attacker can send a crafted intent to the com.callos14.callscreen.colorphone.DialerActivity component, enab...

CVE-2024-53935

The com.callos14.callscreen.colorphone aka iCall OS17 - Color Phone Flash application through 4.3 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callos14.callscreen.colorphone.DialerActivity component...

PT-2025-3002 · Unknown · Com.Callos14.Callscreen.Colorphone

Name of the Vulnerable Software and Affected Versions: com.callos14.callscreen.colorphone also known as iCall OS17 - Color Phone Flash versions 4.3 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

Galaxy studio apps iCall OS17 Color Phone Flash 安全漏洞

Galaxy studio apps iCall OS17 Color Phone Flash is a default dialer application from Galaxy studio apps, Inc. A security vulnerability exists in Galaxy studio apps iCall OS17 Color Phone Flash version 4.3 and earlier, which originates from a crafted intent that can be sent via the...

CVE-2024-53932

The com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme application through 21.1.9 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53931

The com.glitter.caller.screen (also known as iCaller, Caller Theme & Dialer ) application for Android, version 1.1 and earlier , contains a vulnerability that allows any application to place phone calls without user interaction. This is caused by the com.glitter.caller.screen.DialerActivity compo...

BG.Studio Color Phone Call Screen App 安全漏洞

BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen application from BG.Studio, Inc. A security vulnerability exists in BG.Studio Color Phone Call Screen App version 21.1.9 and earlier, which stems from a vulnerability that allows any application...

PT-2025-2999 · Unknown · Com.Remi.Colorphone.Callscreen.Calltheme.Callerscreen

Name of the Vulnerable Software and Affected Versions: com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme versions through 21.1.9 for Android Description: The issue allows any application to place phone calls without user interaction by sending a crafted inte...

CVE-2020-9080: Improper Privilege Management

There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. Vulnerability ID: HWPSIRT-2020-05272 This vulnerabilit...

CVE-2020-9253: Stack-based Buffer Overflow

There is a stack overflow vulnerability in some Huawei smart phone. An attacker can craft specific packet to exploit this vulnerability. Due to insufficient verification, this could be exploited to tamper with the information to affect the availability. Vulnerability ID: HWPSIRT-2019-11030 This...

Heels on fire. Hacking smart ski socks

TL;DR A silly-season BLE connectivity story Overheat people’s smart ski socks …but only when in Bluetooth range AND when the owner's phone is out of range of their feet! Having experienced painfully cold feet several times over the years while skiing, including once at minus 42°C in the Canadian...

CVE-2024-11811: Improper Neutralization of Input During Web Page Generation

The Feedify – Web Push Notifications plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'platform', 'phone', 'email', and 'storeurl' parameters. in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible...

WordPress plugin Feedify – Web Push Notifications 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

PT-2024-17267 · WordPress · Feedify – Web Push Notifications

Name of the Vulnerable Software and Affected Versions: The Feedify – Web Push Notifications plugin for WordPress versions up to, and including, 2.4.2 Description: The issue is related to Reflected Cross-Site Scripting via the platform, phone, email, and store url parameters due to insufficient...

CVE-2020-9250: Improper Authentication

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. Vulnerability ID: HWPSIRT-2019-12302 Th...

Malicious code in client-cloud-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f1ae3b18921b79d7beb07afcdddc3fbc53fecdee3c647fcabe847b93220d0d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...