Sql injection

Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php...

CVE-2022-45010

Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php...

CVE-2022-45010: Improper Neutralization of Special Elements used in an SQL Command

Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php...

Simple Phone Book/Directory Web App SQL Injection Vulnerability

Simple Phone book/directory Web App is a simple phone book/directory web application by bakhtiar individual developer. A security vulnerability exists in Simple Phone Book/Directory Web App v1.0, which was discovered to contain an SQL injection vulnerability via the editid parameter of...

CVE-2022-45010

Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php...

CVE-2022-45010

CVE-2022-45010 affects the “Simple Phone Book/Directory Web App v1.0.” The vulnerability is a SQL injection exposed via the editid parameter on the endpoint /PhoneBook/edit.php. The available metrics list a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required,...

PT-2022-27366 · Unknown · Simple Phone Book/Directory Web App

Name of the Vulnerable Software and Affected Versions: Simple Phone Book/Directory Web App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the editid parameter at the "/PhoneBook/edit.php" API endpoint. Recommendations: For...

Watch out for this triple threat PayPal phish

ZDNet reports an interesting form of PayPal scam sent to one of their own writers. The scam is a so-called "triple threat" phish, in that it gives the scammer three different ways to potentially collect some ill gotten gains from potential victims. The idea is that if one of the three tactics...

Google Pixel security vulnerabilities

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in the enforceVisualVoicemailPackage of PhoneInterfaceManager.java in Google Android version 13.0, which stems from a privilege bypass issue. An attacker can exploit the...

Huawei HarmonyOS authorization issue vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS. An attacker exploits the vulnerability to bypass authentication, resulting in reduced phone availability...

PUB-A-231630423

In various functions of apinputprocessor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

ASB-A-231496105

In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

This Malicious App Abused Hacked Devices to Create Fake Accounts on Multiple Platforms

A malicious Android SMS application discovered on the Google Play Store has been found to stealthily harvest text messages with the goal of creating accounts on a wide range of platforms like Facebook, Google, and WhatsApp. The app, named Symoo com.vanjan.sms, had over 100,000 downloads and...

Apple Tracks You More Than You Think

Plus: WikiLeaks’ website is falling apart, tax websites are sending your data to Facebook, and cops take down a big phone-number-spoofing operation...

Top 6 Cell Phone Tracker Apps for Parental Control

By Owais Sultan A parental control app is an effective software that can help parents stay on guard, prevent, and react timely to online and offline dangers. This is a post from HackRead.com Read the original post: Top 6 Cell Phone Tracker Apps for Parental Control...

U.K. Police Arrest 142 in Global Crackdown on 'iSpoof' Phone Spoofing Service

A coordinated law enforcement effort has dismantled an online phone number spoofing service called iSpoof and arrested 142 individuals linked to the operation. The websites, ispoof.me and ispoof.cc, allowed the crooks to "impersonate trusted corporations or contacts to access sensitive informatio...

CVE-2022-41655

Auth. subscriber+ Sensitive Data Exposure vulnerability in Phone Orders for WooCommerce plugin = 3.7.1 on WordPress...

CVE-2022-41655

Auth. subscriber+ Sensitive Data Exposure vulnerability in Phone Orders for WooCommerce plugin = 3.7.1 on WordPress...

Code injection

Auth. subscriber+ Sensitive Data Exposure vulnerability in Phone Orders for WooCommerce plugin = 3.7.1 on WordPress...

CVE-2022-41655

CVE-2022-41655 affects the WordPress plugin Phone Orders for WooCommerce (versions ≤ 3.7.1). The root issue is a sensitive data exposure that is accessible to authenticated users with subscriber-level privileges (and higher). Documented impact is exposure of Auth. (subscriber+) data. The vulnerab...