4514 matches found
CVE-2021-1863
An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to place phone calls to any phone number...
CVE-2021-1863
An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to place phone calls to any phone number...
Authentication flaw
An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to place phone calls to any phone number...
CVE-2021-1863
An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to place phone calls to any phone number...
Apple iOS 和 iPadOS 缓冲区错误漏洞
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS, which can result in arbitrary code execution due to the...
Command Execution Vulnerability in E-Mobile (CNVD-2021-67574)
E-Mobile is a mobile office product developed by Shanghai Pantech Network Technology Co., Ltd. and is designed for cell phone, tablet and other mobile end users...
The vulnerability of the TrustZone microprogramming technology implementation in Cisco IP Phone series 8800 allows a intruder to execute arbitrary code.
The vulnerability of the TrustZone microprogramming system implementation in Cisco IP Phone series 8800 devices is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Facebook For Android Friend Acceptance
Author - Sivanesh Ashok | @sivaneshashok | stazot.com Date : 2021-08-03 Vendor : https://facebook.com/ Version : Tested on : Version 329.0.0.29.120, Android 10 Last Modified : 2021-08-10 -- Bug Description Facebook for Android is vulnerable to a permission issue which allows anyone with physical...
Breaking the Android Bootloader on the Qualcomm Snapdragon 660
This post is a companion to the DEF CON 29 video available here. A few months ago I purchased an Android phone to do some research around a specific series of NFC chips, which required me to gain root access to the device in order to fully access its hardware capabilities. Gaining root access on...
‘I’m Calling About Your Car Warranty’, aka PII Hijinx
LAS VEGAS – When you sign up on a new website, where does that information go? Some researchers decided to find out. On Wednesday, they released their preliminary information at a Black Hat USA 2021 session called Use and Abuse of Personal Information. Researchers created 300 fake identities,...
CVE-2021-36623
Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE...
CVE-2021-36623
Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE...
CVE-2021-36623
Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE...
Design/Logic Flaw
Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE...
CVE-2021-36623
Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE...
CVE-2021-36623
CVE-2021-36623 affects Sourcecodester Phone Shop Sales Management System 1.0 (PHP). The vulnerability is an arbitrary file upload that leads to remote code execution. The connected sources confirm the affected product and the root cause (unrestricted file upload). There are citations indicating e...
SourceCodester Phone Shop Sales Management System 代码问题漏洞
SourceCodester Phone Shop Sales Management System is a PHP project called Phone Shop Sales Management System by SourceCodester USA. The project manages phone store sales transactions. A file upload vulnerability exists in SourceCodester Phone Shop Sales Management System, which can be exploited b...
CVE-2021-36624
Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...