WordPress Login with phone number Plugin <= 1.7.18 is vulnerable to Broken Access Control

Software Login with phone number Type Plugin Vulnerable versions = 1.7.18 Fixed in 1.7.20 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34371 Patch priority Low CVSS severity Low 4.3 Developer Hamid Alinia PSID 42d051f8202b Credits Dhabaleshwar Das...

Motorola Phone Extension 安全漏洞

Motorola Phone Extension is a cell phone application from Motorola USA. A security vulnerability exists in Motorola Phone Extension, which stems from an incorrect export vulnerability that could allow a local attacker to perform unauthorized activities...

Motorola Phone 安全漏洞

Motorola Phone is an application from Motorola USA. A security vulnerability exists in Motorola Phone that stems from an implicit intent to export vulnerability that could allow unauthorized access to non-exporting content providers...

Motorola Framework 安全漏洞

Motorola Framework is a framework from Motorola USA. A security vulnerability exists in Motorola Framework that stems from the presence of an implicit intent vulnerability that could allow an attacker to read data related to a phone call...

Motorola Phone Calls 安全漏洞

Motorola Phone Calls is a cell phone application from Motorola USA. A security vulnerability exists in Motorola Phone Calls that stems from an incorrect export vulnerability that could allow a local attacker to read unauthorized information...

PT-2024-12981 · Motorola · Motorola Phone Calls

Name of the Vulnerable Software and Affected Versions: Motorola Phone Calls affected versions not specified Description: An improper export issue in the Motorola Phone Calls application could allow a local attacker to read unauthorized information. Recommendations: At the moment, there is no...

CVE-2023-41828: Use of Implicit Intent for Sensitive Communication

An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider...

PT-2024-12988 · Motorola · Motorola Phone Calls

Name of the Vulnerable Software and Affected Versions: Motorola Phone Calls affected versions not specified Description: An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data...

Motorola Phone Calls 安全漏洞

Motorola Phone Calls is a cell phone application from Motorola USA. A security vulnerability exists in the Motorola Phone Calls Application, which stems from an implicit intent vulnerability that could allow a local attacker to read the calling phone number and call data...

PT-2024-12992

Name of the Vulnerable Software and Affected Versions Motorola Phone application affected versions not specified Description An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider...

PT-2024-12987

Name of the Vulnerable Software and Affected Versions Motorola Phone Extension affected versions not specified Description An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activities. Recommendatio...

CVE-2023-41824: Use of Implicit Intent for Sensitive Communication

An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data...

CVE-2023-41823: Improper Export of Android Application Components

An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activities...

CVE-2023-41817: Use of Implicit Intent for Sensitive Communication

An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information...

CVE-2023-51596: Heap-based Buffer Overflow

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-50229: Heap-based Buffer Overflow

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-50230: Heap-based Buffer Overflow

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

Vulnerabilities fixed in Cisco IP phones

Cisco has fixed vulnerabilities in the firmware of several IP Phone systems. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or gain access to sensitive data on the vulnerable device and thus potentially manipulate phone calls. Cisco has released updates to fix t...

CVE-2024-31965

A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker with administrative privilege to conduct a path traversal attack due to insufficient input...

CVE-2024-31967: Improper Access Control

A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an unauthenticated attacker to conduct an unauthorized access attack due to improper access control. A successful exploit...