Malicious code in pipedrive-embeddable-ringcentral-phone-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bc150e5ccb4209c706e7a4df2edfb54c9bbe1fc826a89a7bc5f011fe54676a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5341 Malicious code in pipedrive-embeddable-ringcentral-phone-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bc150e5ccb4209c706e7a4df2edfb54c9bbe1fc826a89a7bc5f011fe54676a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pipedrive-embeddable-engage-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d86a390ab51c1f55c23ea94dbf9a4faf91454d565be06c287514428ec0a36de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5340 Malicious code in pipedrive-embeddable-engage-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d86a390ab51c1f55c23ea94dbf9a4faf91454d565be06c287514428ec0a36de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-communication-phone-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eebc84b85319ed6d2f36c9fc902fe8dbf16a721c397be33473db4cca00811c8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1303 Malicious code in azure-communication-phone-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eebc84b85319ed6d2f36c9fc902fe8dbf16a721c397be33473db4cca00811c8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in phone_helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fbead911ad2dfe54767681ab7fc6b76c37509b0b20c5598e84245c9283f539d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2137 Malicious code in communication-phone-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042005d1096efded1c16660b5fb79cbbcc30d3782802bd7f49fb55bb56737c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in communication-phone-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042005d1096efded1c16660b5fb79cbbcc30d3782802bd7f49fb55bb56737c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1304 Malicious code in azure-communication-phone-numbers-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8429bebe06e34edb061ea6b59997e622bda91773c604839ae8159676029df670 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Here’s Why You’re Still Stuck in Robocall Hell

Despite major progress fighting spam and scams, the roots of the problem go far deeper than your phone company’s defenses...

Cisco Unified IP Phones Security Feature Issue Vulnerability

Cisco Unified IP Phones is a series of IP phones from Cisco, U.S.A. A security feature issue vulnerability exists in Cisco Unified IP Phones, which stems from the failure to properly generate keys during the manufacturing process resulting in the installation of duplicate manufacturing keys on...

Samsung Account Privilege Management Improper Vulnerability (CNVD-2022-64088)

Samsung Account is a cell phone account from Samsung, a South Korean company. versions prior to Samsung Account 13.2.00.6 contain a privilege management vulnerability that could be exploited to obtain a user's email or phone number with normal-level privileges...

Samsung Account Information Disclosure Vulnerability (CNVD-2022-64085)

Samsung Account is a cell phone account from Samsung, a South Korean company. versions prior to Samsung Account 13.2.00.6 contain an information disclosure vulnerability that could be exploited by an attacker to obtain a user's email or phone number without permission...

CVE-2022-20817 Cisco IP Phone Duplicate Key Vulnerability

A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...

CVE-2022-20817 Cisco IP Phone Duplicate Key Vulnerability

A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...

CVE-2022-20817

Cisco CVE-2022-20817 affects Cisco Unified IP Phones when CUCM is in secure mode. Root cause: improper manufacturing key generation leads to duplicate manufactured keys on multiple devices, enabling a remote attacker to perform a man-in-the-middle attack and impersonate another user’s phone. Impa...

Cisco IP Phone Duplicate Key Vulnerability

A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...

CVE-2022-20129

In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20129

In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for...