bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability

A flaw was found within the handling of the Phone Book Access profile in BlueZ. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a...

bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability

A flaw was found within the handling of the Phone Book Access profile in BlueZ. In certain conditions, a network-adjacent attacker can execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicio...

bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability

A flaw was found within the handling of the Phone Book Access profile in BlueZ. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a...

November 12, 2024—KB5046616 (OS Build 20348.2849)

None None...

Teachers Record Management System add-teacher.php File SQL Injection Vulnerability

Teachers Record Management System is a teacher record management system. Teachers Record Management System is vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability in the add-teacher.php file via a cell phone number or email parameter. No detail...

Cisco IP Phone Information Disclosure Vulnerability

Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. The Cisco IP Phone suffers from an information disclosure vulnerability that stems from improper storage of sensitive information in the Web UI of the Session Initiation Protoco...

CVE-2024-36064

The NLL com.nll.cb aka ACR Phone application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component...

CVE-2024-36062

The com.callassistant.android aka AI Call Assistant & Screener application 1.174 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component...

CVE-2020-11921

An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device...

CVE-2024-36064

The NLL com.nll.cb aka ACR Phone application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component...

CVE-2024-36064

The NLL com.nll.cb aka ACR Phone application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component...

CVE-2024-36064

The NLL com.nll.cb (known as ACR Phone ) application for Android, specifically versions through 0.330-playStore-NoAccessibility-arm8 , contains a security vulnerability. A malicious application installed on the same device can place phone calls without user interaction by sending a crafted intent...

CVE-2024-36063

The Goodwy com.goodwy.dialer (also known as Right Dialer ) application for Android, affecting versions through 5.1.0 , contains a vulnerability that allows unauthorized phone calls. An attacker can trigger these calls without user interaction by sending a crafted intent to the com.goodwy.dialer.a...

CVE-2024-36062

The com.callassistant.android aka AI Call Assistant & Screener application 1.174 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component...

CVE-2024-36062

The com.callassistant.android aka AI Call Assistant & Screener application 1.174 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component...

PT-2024-26876

Name of the Vulnerable Software and Affected Versions com.nll.cb aka ACR Phone versions 0.330-playStore-NoAccessibility-arm8 and earlier Description The issue allows any installed application, without requiring permissions, to place phone calls without user interaction. This is achieved by sendin...

CVE-2024-36063

The Goodwy com.goodwy.dialer aka Right Dialer application through 5.1.0 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.goodwy.dialer.activities.DialerActivity component...

CVE-2024-36063

The Goodwy com.goodwy.dialer aka Right Dialer application through 5.1.0 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.goodwy.dialer.activities.DialerActivity component...

CVE-2024-36062

The com.callassistant.android (AI Call Assistant & Screener) application version 1.174 for Android contains a security vulnerability where any installed application—even those without specific permissions—can place phone calls without user interaction. This is caused by the com.callassistant.andr...

CVE-2024-36062: Improper Preservation of Permissions

The com.callassistant.android aka AI Call Assistant & Screener application 1.174 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component...