5333 matches found
Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of the web-based management interface of an affected...
Cisco IP Phone Cross-site Request Forgery Vulnerability
Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. A security vulnerability exists in the Cisco IP Phone that stems from insufficient CSRF protection and could allow an unauthenticated, remote attacker to conduct a cross-site...
CVE-2023-20221: Cross-Site Request Forgery (CSRF)
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of the web-based management interface of an affected...
CVE-2023-26310
There is a command injection problem in the old version of the mobile phone backup app...
Command injection
There is a command injection problem in the old version of the mobile phone backup app...
CVE-2023-26310 Command Injection In OPPO Service
There is a command injection problem in the old version of the mobile phone backup app...
CVE-2023-26310: Improper Neutralization of Argument Delimiters in a Command
There is a command injection problem in the old version of the mobile phone backup app...
The NSA Is Lobbying Congress to Save a Phone Surveillance 'Loophole'
The National Security Agency has urged top lawmakers to resist demands that it obtain warrants for sensitive data sold by data brokers...
CVE-2023-3788: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in ActiveITzone Active Super Shop CMS 2.5. This issue affects some unknown processing of the component Manage Details Page. The manipulation of the argument name/phone/address leads to cross site scripting. The attack may be...
Car Rental Script Cross-site Script Vulnerability
Car Rental Script is an open source vehicle rental script from GZ Script. GZ Script Car Rental Script version 1.8 cross-site scripting vulnerability , the vulnerability stems from the parameter firstname/secondname/phone/address1/country cross-site scripting XSS vulnerability...
PT-2023-26028 · Unknown · Gz Scripts Car Rental Script
Name of the Vulnerable Software and Affected Versions: GZ Scripts Car Rental Script version 1.8 Description: A problematic vulnerability has been found in the software. The issue affects an unknown function of the file...
WordPress WP Phone Message Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
Software WP Phone Message Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3e96bec156d3 Credits Rafie Muhammad Patchstack Require...
Tracking Down a Suspect through Cell Phone Records
Interesting forensics in connection with a serial killer arrest: Investigators went through phone records collected from both midtown Manhattan and the Massapequa Park area of Long Island--two areas connected to a "burner phone" they had tied to the killings. In court, prosecutors later said the...
UNISOC Chipsets security vulnerabilities
UNISOC Chipsets is a chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in some UNISOC products, which stems from a lack of privilege checking in the phone service, resulting in local privilege escalation. The following products are affected:...
UNISOC Chipsets security vulnerabilities
UNISOC Chipsets is a chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in some UNISOC products, which stems from a lack of privilege checking in the phone service, resulting in local privilege escalation. The following products are affected:...
CVE-2023-37190
A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...
GZ Scripts Ticket Booking Script Cross-site Script Vulnerability
GZ Scripts Ticket Booking Script is a ticket booking system from GZ Scripts. A cross-site scripting vulnerability exists in GZ Scripts Ticket Booking Script version 1.8, which stems from cross-site scripting due to incorrect manipulation of the parameters firstname, secondname, phone, address1, a...
GZScripts PHP GZ Hotel Booking Script – Cross-site Script Vulnerability
GZScripts is a script from GZScripts Inc. A cross-site scripting vulnerability exists in GZScripts PHP GZ Hotel Booking Script version 1.8, which stems from cross-site scripting due to incorrect manipulation of the parameters firstname, secondname, phone, address1, and country...
GZ Scripts Event Booking Calendar Cross-Site Script Vulnerability
GZ Scripts Event Booking Calendar is an event booking calendar application from GZ Scripts. A cross-site scripting vulnerability exists in GZ Scripts Event Booking Calendar version 1.8, which stems from cross-site scripting due to incorrect manipulation of the parameters firstname, secondname,...