Lucene search
+L

4514 matches found

OSV
OSV
added 2021/12/15 7:15 p.m.6 views

CVE-2021-0990

In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction ...

3.3CVSS5.9AI score0.0011EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/15 7:15 p.m.16 views

CVE-2021-0990

In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction ...

3.3CVSS0.0011EPSS
SaveExploits0References1
Wired Threat Level
Wired Threat Level
added 2021/12/12 12:00 p.m.19 views

How to Guard Against Smishing Attacks on Your Phone

“Smishing" is an attempt to collect logins or other sensitive information with a malicious text message—and it's on the rise...

1.6AI score
SaveExploits0
Hacker One
Hacker One
added 2021/12/10 5:10 a.m.17 views

Yelp: Fraudulent claim of business.

Vulnerability description not provided...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/12/08 12:00 a.m.7 views

The vulnerability of iOS operating systems, related to deficiencies in authentication procedures, allows a perpetrator to activate the Apple Pay transaction card on a locked or drained phone.

The vulnerability of iOS operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enable the Apple Pay payment card on a locked or drained phone using a static 15-byte string...

5.3CVSS5.5AI score
SaveExploits0Affected Software1
OSV
OSV
added 2021/12/07 5:15 p.m.8 views

CVE-2021-37095

There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote denial of service and potential remote code execution...

9.8CVSS6AI score0.0137EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/07 5:15 p.m.24 views

CVE-2021-37057

There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to restart the phone...

7.8CVSS0.00667EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/12/07 4:02 p.m.24 views

CVE-2021-37057

There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to restart the phone...

7.7AI score0.00667EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/07 4:02 p.m.59 views

CVE-2021-37057

CVE-2021-37057 relates to Huawei HarmonyOS smartphones and is described as an Improper Validation of Array Index vulnerability that can lead to a device restart (availability impact). The connected sources mention input validation issues and DoS-like effects but do not provide precise affected ve...

7.8CVSS7.5AI score0.00667EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2021/12/06 11:30 a.m.43 views

Toutatis - A Tool That Allows You To Extract Information From Instagrams Accounts Such As E-Mails, Phone Numbers And More

Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more Prerequisite Python 3 ️ Installation With PyPI pip install toutatis With Github git clone https://github.com/megadose/toutatis.git cd toutatis/ python3 setup.py install ...

6.9AI score
SaveExploits0References4
ThreatPost
ThreatPost
added 2021/12/03 7:46 p.m.26 views

Omicron Phishing Scam Already Spotted in UK

The global pandemic has provided cover for all sorts of phishing scams over the past couple of years, and the rise in alarm over the spread of the latest COVID-19 variant, Omicron, is no exception. As public health professionals across the globe grapple with what they fear could be an even more...

6.9AI score
SaveExploits0References12
Schneier on Security
Schneier on Security
added 2021/12/03 12:13 p.m.22 views

Testing Faraday Cages

Matt Blaze tested a variety of Faraday cages for phones, both commercial and homemade. The bottom line: A quick and likely reliable "go/no go test" can be done with an Apple AirTag and an iPhone: drop the AirTag in the bag under test, and see if the phone can locate it and activate its alarm bewa...

0.9AI score
SaveExploits0
NVD
NVD
added 2021/12/01 4:15 p.m.25 views

CVE-2021-44480

Wokka Lokka Q50 devices through 2021-11-30 allow remote attackers who know the SIM phone number and password to listen to a device's surroundings via a callback in an SMS command, as demonstrated by the 123456 and 523681 default passwords...

9.3CVSS0.01041EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/01 4:15 p.m.17 views

Default credentials

Wokka Lokka Q50 devices through 2021-11-30 allow remote attackers who know the SIM phone number and password to listen to a device's surroundings via a callback in an SMS command, as demonstrated by the 123456 and 523681 default passwords...

9.3CVSS7.9AI score0.01041EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/12/01 3:38 p.m.33 views

CVE-2021-44480

Wokka Lokka Q50 devices through 2021-11-30 allow remote attackers who know the SIM phone number and password to listen to a device's surroundings via a callback in an SMS command, as demonstrated by the 123456 and 523681 default passwords...

8.2AI score0.01041EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/23 4:15 p.m.9 views

CVE-2021-37032

There is a Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Digital Balance to fail to work...

5.3CVSS6.1AI score0.00673EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/12 10:15 p.m.7 views

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

5.5CVSS5.8AI score0.00212EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/12 10:15 p.m.18 views

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

5.5CVSS0.00212EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/12 10:15 p.m.11 views

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

5.5CVSS6AI score0.00212EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/12 10:15 p.m.20 views

Information disclosure

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

2.1CVSS5.2AI score0.00212EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder