Cisco IP Phone 信息泄露漏洞

Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. The Cisco IP Phone suffers from an information disclosure vulnerability that stems from improper storage of sensitive information in the Web UI of the Session Initiation Protoco...

Cisco IP Phone 跨站脚本漏洞

Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. The Cisco IP Phone suffers from a cross-site scripting vulnerability that stems from the affected device's WebUI not properly validating user-supplied input. An authenticated,...

PT-2024-8290

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 6800 versions affected versions not specified Cisco IP Phone 7800 versions affected versions not specified Cisco IP Phone 8800 versions affected versions not specified Cisco Video Phone 8875 versions affected versions not...

CVE-2024-20533: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks against users. This vulnerabilit...

Cisco IP Phone 跨站脚本漏洞

The Cisco IP Phone is a hardware device from Cisco, Inc. IP Phone that provides calling capabilities. The Cisco IP Phone suffers from a cross-site scripting vulnerability that stems from the affected device's WebUI not properly validating user-supplied input. An authenticated, remote attacker cou...

CVE-2024-51517

Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51517

Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51517

Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51517

Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51517

CVE-2024-51517 affects Huawei HarmonyOS, with the phone/Telephony Services module suffering from improper memory access. The impact is availability loss (exploit locally with low complexity; requires low privileges; no user interaction). Several sources corroborate the vulnerability in HarmonyOS,...

PT-2024-34680 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: The issue is related to improper memory access in the phone service module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the moment, there is...

CVE-2024-51517: Improper Validation of Array Index

Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2024-26100 · Crane · Crane

Name of the Vulnerable Software and Affected Versions: Crane versions prior to SMR Nov-2024 Release 1 Description: The issue is related to incorrect default permissions, allowing local attackers to access files with phone privilege. Recommendations: For versions prior to SMR Nov-2024 Release 1,...

PHPGurukul Teachers Record Management System 安全漏洞

Teachers Record Management System is a teacher record management system. Teachers Record Management System is vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability in the add-teacher.php file via a cell phone number or email parameter. No detail...

CVE-2024-37573

The Talkatone com.talkatone.android application version 8.4.6 for Android contains a security vulnerability that allows any installed application, even those with no permissions, to place phone calls without user interaction. This is caused by the ability of an attacker to send a crafted intent t...

CVE-2024-37573

The Talkatone com.talkatone.android application 8.4.6 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.talkatone.vedroid.ui.launcher.OutgoingCallInterceptor component...

CVE-2024-37573: Undefined Security Weakness

The Talkatone com.talkatone.android application 8.4.6 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.talkatone.vedroid.ui.launcher.OutgoingCallInterceptor component...

CVE-2017-20195

A vulnerability was found in LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec. It has been rated as critical. This issue affects some unknown processing of the file request.php. The manipulation of the argument phone leads to sql injection. This product does not use versioning. Thi...

PT-2024-10604 · Unknown · Lunad3V Areaload

Name of the Vulnerable Software and Affected Versions: LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec Description: A critical issue affects the processing of the file request.php, where the manipulation of the phone argument leads to sql injection. The estimated number of...

AreaLoad SQL注入漏洞

AreaLoad is an open source job upload platform written in PHP by Lizihu Utopia LUNA Association. AreaLoad suffers from an SQL injection vulnerability that stems from the parameter phone in the file request.php that can lead to SQL injection...