4507 matches found
Asterisk 安全漏洞
Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk version 20.15.2 and versions prior to 22.5.2 have a security vulnerability that stems from the getauthorizationheader function returning NULL resultin...
Linux Distros Unpatched Vulnerability : CVE-2022-22677
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS...
New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station
A team of academics has devised a novel attack that can be used to downgrade a 5G connection to a lower generation without relying on a rogue base station gNB. The attack, per the ASSET Automated Systems SEcuriTy Research Group at the Singapore University of Technology and Design SUTD, relies on ...
Phone Searches at the US Border Hit a Record High
Customs and Border Protection agents searched nearly 15,000 devices from April through June of this year, a nearly 17 percent spike over the previous three-month high in 2022...
Australian ISP iiNet Reports Data Breach, Customer Accounts Stolen
Australian ISP iiNet confirms data breach as hackers stole 280,000 email accounts, phone numbers and user data using…...
How to spot the latest fake Gmail security alerts
Security alerts from tech companies are supposed to warn us when something might be amiss—but what if the alerts themselves are the risk? Scammers have long impersonated tech companies' security and support staff as a way to sniff out users' login credentials, and reports suggest that they're doi...
Eavesdropping on Phone Conversations Through Vibrations
Researchers have managed to eavesdrop on cell phone voice conversations by using radar to detect vibrations. It's more a proof of concept than anything else. The radar detector is only ten feet away, the setup is stylized, and accuracy is poor. But it's a start...
CVE-2025-8342
The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...
PT-2025-33428 · WordPress · Woocommerce Otp Login With Phone Number
Name of the Vulnerable Software and Affected Versions: WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress versions up to and including 1.8.47 Description: The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is susceptible to authenticatio...
WordPress WooCommerce OTP Login With Phone Number, OTP Verification plugin <= 1.8.47 - Authentication Bypass vulnerability
Authentication Bypass vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Login with phone number versions = 1.8.47...
Malicious code in @lbnqduy/stunning-rotary-phone (npm)
The package @lbnqduy/stunning-rotary-phone was found to contain malicious code...
Malicious code in @lbnqduy/curly-octo-rotary-phone (npm)
The package @lbnqduy/curly-octo-rotary-phone was found to contain malicious code...
MAL-2025-8325 Malicious code in @lbnqduy/curly-octo-rotary-phone (npm)
The package @lbnqduy/curly-octo-rotary-phone was found to contain malicious code...
Malicious code in phone-scrape-dll (npm)
The package phone-scrape-dll was found to contain malicious code...
MAL-2025-29157 Malicious code in phone-scrape-dll (npm)
The package phone-scrape-dll was found to contain malicious code...
MAL-2025-8350 Malicious code in @lbnqduy/stunning-rotary-phone (npm)
The package @lbnqduy/stunning-rotary-phone was found to contain malicious code...
CLSA-2025-1755113613 bluez: Fix of 2 CVEs
CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone Book Access profile by adding proper validation of user-supplied data length before copying to buffer - CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book Access profile to prevent arbitrary...
Netgear SPH200D Directory Traversal Vulnerability
The Netgear SPH200D is a wireless Internet phone from Netgear USA. The Netgear SPH200D suffers from a directory traversal vulnerability that can be exploited by an attacker to view arbitrary files on the system by sending a crafted URL request...
CVE-2025-8393
A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishing TLS communication which may result in man-in-the-middle attacks on untrusted networks. Captured communications may include user credentia...