4514 matches found
com.full.dialer.top.secure.crypted security vulnerability
com.full.dialer.top.secure.crypted is a library by actuator personal developer. A security vulnerability exists in com.full.dialer.top.secure.crypted 1.0.1 and earlier versions, which stems from allowing any installed application to make a phone call by sending a crafted intent...
CVE-2023-42468
The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...
CVE-2023-42469
The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.full.dialer.top.secure.encrypted.activities.DialerActivity component...
CVE-2023-42468
CVE-2023-42468 affects the Android app com.cutestudio.colordialer (versions up to 2.1.8-2). The vulnerability stems from an improperly exported DialerActivity, allowing a remote attacker to initiate phone calls without user consent by crafting an android.intent.action.CALL intent with a tel: URI ...
CVE-2023-42468
The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...
PT-2023-28359 · Unknown · Com.Full.Dialer.Top.Secure.Encrypted
Name of the Vulnerable Software and Affected Versions: com.full.dialer.top.secure.encrypted application version 1.0.1 Description: The issue allows any installed application, without requiring permissions, to place phone calls without user interaction. This is achieved by sending a crafted intent...
WordPress plugin Login with phone number Cross-site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. The WordPress plugin Login with phone number suffer...
Color Phone Security Vulnerability
Color Phone is a dialer with the ability to change themes. A security vulnerability exists in Color Phone version 2.1.8-2 and earlier, which originated from a vulnerability that allows remote attackers to initiate a phone call without the user's consent...
Jetpack CRM < 5.5.1 - Client+ XSS
Description The plugin does not sanitise and escape a client's phone number field, which could allow client users to perform Cross-Site Scripting attacks...
PT-2023-31077 · WordPress · Login With Phone Number Plugin For Wordpress
Name of the Vulnerable Software and Affected Versions: Login with phone number plugin for WordPress versions up to, and including, 1.5.6 Description: The issue is related to Cross-Site Request Forgery due to missing nonce validation on the lwp update password action function. This allows...
CVE-2023-30711
Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...
CVE-2023-30711
Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...
Authentication flaw
Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...
CVE-2023-30711
Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...
CVE-2023-30711
Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...
CVE-2023-30711
Technical details (affected products, versions, exploit information, and fixes) are not publicly provided in the supplied documents. Monitor for updates from Samsung and vendors for a confirmed fix and impact.
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability previously existed in SAMSUNG Mobile devices SMR SEP-2023 Release 1 version, which stemmed from improper authentication in Phone and Messaging...
PT-2023-22912 · Unknown · Phone/Messaging Storage Smr Sep-2023 Release 1
Name of the Vulnerable Software and Affected Versions: Phone and Messaging Storage SMR SEP-2023 Release 1 Description: The issue is related to improper authentication, allowing an attacker to insert arbitrary data into the provider. Recommendations: For Phone and Messaging Storage SMR SEP-2023...
DLINK DPH-400SE FRU2.2.15.8 Information Disclosure
Exploit Title : DLINK DPH-400SE - Exposure of Sensitive Information Date : 25-08-2023 Exploit Author : tahaafarooq Vendor Homepage : https://dlink.com/ Version : FRU2.2.15.8 Tested on: DLINK DPH-400SE VoIP Phone Description: With default credential for the guest user "guest:guest" to login on the...
