CVE-2022-20223

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20223: Externally Controlled Reference to a Resource in Another Sphere

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

Malicious Package

Overview redox-phone-support is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

CVE-2022-22677

A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call...

Denial Of Service (DoS)

webkit2gtk is vulnerable to denial of service. The vulnerability exists due to a logic issue in video self-preview feature in a webrtc call, which can be interrupted if the user answers a phone call...

Login with phone number < 1.3.8 - Multiple Admin+ Stored XSS

The plugin does not sanitise and escape plugin settings which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Plugin settings Style Settings button border radius or other field put to input field:...

ASB-A-223578534

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2022-14447

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12L Description In the assertSafeToStartCustomActivity function of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could...

Toll fraud malware: How an Android application can drain your wallet

Toll fraud malware, a subcategory of billing fraud in which malicious applications subscribe users to premium services without their knowledge or consent, is one of the most prevalent types of Android malware – and it continues to evolve. Compared to other subcategories of billing fraud, which...

Cisco Unified IP Phones Pseudo Random Number Generation Impersonation

The vulnerability of Cisco Unified IP Phones’ microprogrammed software is related to errors in the code of the pseudorandom number generator. Exploiting this vulnerability can allow an attacker to impersonate another user’s phone...

5 Tips for Protecting Your Phone from Malware

By Deeba Ahmed Most people today depend on their phones entirely. Aside from being a portal to our social life, they… This is a post from HackRead.com Read the original post: 5 Tips for Protecting Your Phone from Malware...

June 23, 2022—KB5014668 (OS Build 22000.778) Preview

None None...

MAL-2022-5725 Malicious code in redtail-embeddable-ringcentral-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37e5c999eca221f2f5469510f6d07da2dbc50c0975f465433eaa4eaccbc506c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5341 Malicious code in pipedrive-embeddable-ringcentral-phone-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bc150e5ccb4209c706e7a4df2edfb54c9bbe1fc826a89a7bc5f011fe54676a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pipedrive-embeddable-ringcentral-phone-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bc150e5ccb4209c706e7a4df2edfb54c9bbe1fc826a89a7bc5f011fe54676a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5340 Malicious code in pipedrive-embeddable-engage-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d86a390ab51c1f55c23ea94dbf9a4faf91454d565be06c287514428ec0a36de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pipedrive-embeddable-engage-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d86a390ab51c1f55c23ea94dbf9a4faf91454d565be06c287514428ec0a36de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-communication-phone-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eebc84b85319ed6d2f36c9fc902fe8dbf16a721c397be33473db4cca00811c8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1303 Malicious code in azure-communication-phone-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eebc84b85319ed6d2f36c9fc902fe8dbf16a721c397be33473db4cca00811c8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in phone_helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fbead911ad2dfe54767681ab7fc6b76c37509b0b20c5598e84245c9283f539d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...