4514 matches found
Design/Logic Flaw
An issue in Xenom Technologies sinous Phone Dialer-voice Call Dialer v.1.2.5 allows an attacker to bypass intended access restrictions via interaction with com.funprime.calldialer.ui.activities.OutgoingActivity...
PT-2023-31027 · Xenom Technologies · Xenom Technologies Phone Dialer-Voice Call Dialer
Name of the Vulnerable Software and Affected Versions: Xenom Technologies Phone Dialer-voice Call Dialer version 1.2.5 Description: An issue in Xenom Technologies Phone Dialer-voice Call Dialer allows an attacker to bypass intended access restrictions via interaction with...
CVE-2023-49002
An issue in Xenom Technologies sinous Phone Dialer-voice Call Dialer v.1.2.5 allows an attacker to bypass intended access restrictions via interaction with com.funprime.calldialer.ui.activities.OutgoingActivity...
CVE-2023-49002
An issue in Xenom Technologies sinous Phone Dialer-voice Call Dialer v.1.2.5 allows an attacker to bypass intended access restrictions via interaction with com.funprime.calldialer.ui.activities.OutgoingActivity...
CVE-2023-49002
The CVE describes a vulnerability in Xenom Technologies Phone Dialer-voice Call Dialer v1.2.5 where an attacker can bypass intended access restrictions by interacting with com.funprime.calldialer.ui.activities.OutgoingActivity. Affected software/component: Phone Dialer-voice Call Dialer, Outgoing...
Phone Dialer-voice Call Dialer Security Vulnerability
Phone Dialer-voice Call Dialer is a voice call dialer that allows you to dial by voice when it is not convenient to dial by hand. A security vulnerability exists in Phone Dialer-voice Call Dialer version v.1.2.5 that originates from a vulnerability that allows an attacker to bypass expected acces...
SUSE CVE-2023-51596
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...
U.S. Dept Of Defense: ███ leaking PII of tour visitors (names, email addresses, phone numbers) via misconfigured record permissions
The ████████ portal was found to be leaking sensitive personal information, including full names, email addresses, and phone numbers of its users. The issue was caused by a misconfiguration that allowed registered users to access records of other users, potentially exposing the data of hundreds o...
SUSE CVE-2023-50230
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...
SUSE CVE-2023-50229
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...
Default credentials
An issue in LTB Self Service Password before v.1.5.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via hijack of the SMS verification code function to arbitrary phone...
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device. The specific flaw exists within the handling of the Phone...
TikTok: Authentication Bypass on TikTok Seller Signup Process Allows Account Creation Without Phone Verification
The authentication bypass vulnerability on the TikTok Seller signup process allowed account creation without phone verification...
Apple iOS and iPadOS Security Vulnerabilities
Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 16.7.2 and iPadOS version 16.7.2, which stems from the fact that...
Cisco IP Phone Stored XSS (cisco-sa-uipphone-xss-NcmUykqA)
According to its self-reported version, Cisco IP Phone Stored Cross-Site Scripting may be affected by a cross-site scripting XSS vulnerability. Due to insufficient validation of user-supplied input, an authenticated, remote attacker can conduct an XSS attacker against a user of the interface on t...
CVE-2023-5325
The Woocommerce Vietnam Checkout WordPress plugin before 2.0.6 does not escape the custom shipping phone field no the checkout form leading to XSS...
PT-2023-32044 · WordPress · Woocommerce Vietnam Checkout
Name of the Vulnerable Software and Affected Versions: WooCommerce Vietnam Checkout WordPress plugin versions prior to 2.0.6 Description: The issue concerns the WooCommerce Vietnam Checkout WordPress plugin, where the custom shipping phone field on the checkout form is not properly escaped, leadi...
Cisco IP Phone Cross-Site Scripting Vulnerability
Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. Cisco IP Phones suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the web-based management...
It's Time to Log Off
There’s a devastating amount of heavy news these days. Psychology experts say you need to know your limits—and when to put down the phone...
CallRail Phone Call Tracking < 0.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Description The CallRail Phone Call Tracking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'callrailform' shortcode in versions up to, and including, 0.5.2 due to insufficient input sanitization and output escaping on the 'formid' user supplied attribute. This makes it...