5334 matches found
Malicious code in communication-phone-numbers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042005d1096efded1c16660b5fb79cbbcc30d3782802bd7f49fb55bb56737c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2137 Malicious code in communication-phone-numbers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042005d1096efded1c16660b5fb79cbbcc30d3782802bd7f49fb55bb56737c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1304 Malicious code in azure-communication-phone-numbers-samples-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8429bebe06e34edb061ea6b59997e622bda91773c604839ae8159676029df670 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Here’s Why You’re Still Stuck in Robocall Hell
Despite major progress fighting spam and scams, the roots of the problem go far deeper than your phone company’s defenses...
Cisco Unified IP Phones Security Feature Issue Vulnerability
Cisco Unified IP Phones is a series of IP phones from Cisco, U.S.A. A security feature issue vulnerability exists in Cisco Unified IP Phones, which stems from the failure to properly generate keys during the manufacturing process resulting in the installation of duplicate manufacturing keys on...
Samsung Account Information Disclosure Vulnerability (CNVD-2022-64085)
Samsung Account is a cell phone account from Samsung, a South Korean company. versions prior to Samsung Account 13.2.00.6 contain an information disclosure vulnerability that could be exploited by an attacker to obtain a user's email or phone number without permission...
Samsung Account Privilege Management Improper Vulnerability (CNVD-2022-64088)
Samsung Account is a cell phone account from Samsung, a South Korean company. versions prior to Samsung Account 13.2.00.6 contain a privilege management vulnerability that could be exploited to obtain a user's email or phone number with normal-level privileges...
CVE-2022-20817 Cisco IP Phone Duplicate Key Vulnerability
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...
CVE-2022-20817
Cisco CVE-2022-20817 affects Cisco Unified IP Phones when CUCM is in secure mode. Root cause: improper manufacturing key generation leads to duplicate manufactured keys on multiple devices, enabling a remote attacker to perform a man-in-the-middle attack and impersonate another user’s phone. Impa...
CVE-2022-20817 Cisco IP Phone Duplicate Key Vulnerability
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...
Cisco IP Phone Duplicate Key Vulnerability
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...
CVE-2022-20129
In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for...
CVE-2022-20129
In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for...
CVE-2022-20134
In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2022-20129
In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for...
PT-2022-14369 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to improper input validation in the registerPhoneAccount function of PhoneAccountRegistrar.java. This could lead to a local denial of service, where the user is...
Employee Leaves Management System Cross-Site Request Forgery Vulnerability
Employee Leaves Management System ELMS is an internal employee management system. A cross-site request forgery vulnerability exists in Employee Leaves Management System ELMS v2.1, which can be exploited by an attacker to change the details of any user profile, such as username, phone number, etc...
How China Hacked US Phone Networks
Plus: Russia rattles its cyber sword, a huge Facebook phishing operation is uncovered, feds take down the SSNDOB marketplace, and more...
