CVE-2025-22434

In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22434

In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-9832

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2025-9832 SourceCodester Food Ordering Management System register-router.php sql injection

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2025-9832 SourceCodester Food Ordering Management System register-router.php sql injection

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2024-32832

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.6.93...

PT-2025-35613

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System version 1.0 Description: A security issue exists in SourceCodester Food Ordering Management System 1.0. Manipulation of the phone argument in an unknown function within the...

WordPress Login with phone number plugin missing authorization vulnerability

WordPress Login with phone number plugin is a plugin for implementing cell phone verification code login, support WordPress and WooCommerce platform, users can be authenticated by cell phone SMS or WhatsApp. The WordPress Login with phone number plugin suffers from a lack of authorization...

PT-2025-35633

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error exists in the handleKeyGestureEvent function of PhoneWindowManager.java that may allow a lock screen bypass. Successful exploitation could lead to local privilege escalation...

SourceCodester Food Ordering Management System 安全漏洞

SourceCodester Food Ordering Management System is a SourceCodester open source food ordering management system. A security vulnerability exists in SourceCodester Food Ordering Management System version 1.0, which is caused by a SQL injection due to a mishandling of the parameter phone in the file...

CVE-2024-32832

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.6.93...

CVE-2024-32832 WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.6.93...

CVE-2024-32832 WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.6.93...

PT-2025-35386

Name of the Vulnerable Software and Affected Versions: Hamid Alinia versions n/a through 1.6.93 Description: A missing authorization issue exists in the Login with phone number functionality. Recommendations: Update to a version later than 1.6.93...

WordPress plugin Login with phone number 安全漏洞

WordPress Login with phone number plugin is a plugin for implementing cell phone verification code login, support WordPress and WooCommerce platform, users can be authenticated by cell phone SMS or WhatsApp. The WordPress Login with phone number plugin suffers from a lack of authorization...

Malicious code in phone-feature-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41592 Malicious code in phone-feature-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in phone-feature-sdk (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41591 Malicious code in phone-feature-sdk (npm)

--- -= Per source details. Do not edit below this line.=-...

Asterisk 安全漏洞

Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk version 20.15.2 and versions prior to 22.5.2 have a security vulnerability that stems from the getauthorizationheader function returning NULL resultin...