CVE-2025-59715

SMSEagle prior to 6.11 is affected by a reflected XSS vulnerability that can be triggered via a username or a contact phone number. Affected software: SMSEagle before 6.11. Underlying cause: reflected XSS in input handling. Impact: potential client-side script execution. Exploitation details are ...

PT-2025-38506

Name of the Vulnerable Software and Affected Versions SMSEagle versions prior to 6.11 Description SMSEagle is susceptible to a reflected cross-site scripting XSS issue. The vulnerability occurs through manipulation of a username or contact phone number. Recommendations Update to version 6.11 or...

WordPress plugin Service Finder SMS System security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2025-10718: Improper Export of Android Application Components

A vulnerability was found in Ooma Office Business Phone App up to 7.2.2 on Android. This affects an unknown part of the component com.ooma.office2. The manipulation results in improper export of android application components. The attack needs to be approached locally. The exploit has been made...

CVE-2025-59715: Improper Neutralization of Input During Web Page Generation

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number...

CVE-2025-5955: Authentication Bypass Using an Alternate Path or Channel

The Service Finder SMS System plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.0. This is due to the plugin not verifying a user's phone number before logging them in. This makes it possible for unauthenticated attackers to login as arbitrary...

CVE-2025-59715

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number...

Cybercriminals Have a Weird New Way to Target You With Scam Texts

Scammers are now using “SMS blasters” to send out up to 100,000 texts per hour to phones that are tricked into thinking the devices are cell towers. Your wireless carrier is powerless to stop them...

realme Clone Phone APP 安全漏洞

realme Clone Phone APP is a data backup and recovery feature from China-based realme realme. A security vulnerability exists in realme Clone Phone APP version 15.1.122810c08250314, which stems from improper handling of the URI scheme in com.coloros.pc.PcToolMainActivity, which could lead to a cra...

CVE-2025-10625

A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/dashboard.php?page=updateprofile. The manipulation of the argument phone results in sql injection. The attack may be launched remotely. The...

CVE-2025-10625 SourceCodester Online Exam Form Submission dashboard.php sql injection

A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/dashboard.php?page=updateprofile. The manipulation of the argument phone results in sql injection. The attack may be launched remotely. The...

CVE-2025-10625

The CVE-2025-10625 entry concerns SourceCodester Online Exam Form Submission 1.0. A SQL injection vulnerability exists in the /user/dashboard.php?page=update_profile handler, triggered by manipulating the phone parameter (and potentially other parameters). The vulnerability is exploitable remotel...

SourceCodester Online Exam Form Submission SQL注入漏洞

SourceCodester Online Exam Form Submission is a SourceCodester open source online exam submission system. A SQL injection vulnerability exists in SourceCodester Online Exam Form Submission version 1.0, which stems from incorrect manipulation of the parameter phone in the file /user/dashboard.php,...

CVE-2025-10625: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/dashboard.php?page=updateprofile. The manipulation of the argument phone results in sql injection. The attack may be launched remotely. The...

PT-2025-38287

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection issue exists due to the manipulation of the phone argument in the file /user/dashboard.php?page=update profile. The attack can be launched remotely. The explo...

How to Set Up and Use a Burner Phone

Obtaining and using a true burner phone is hard—but not impossible. Here are the steps you need to take to protect your mobile communications based on the risks you face...

The vulnerability of the UI component XAML Phone DatePickerFlyout in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the UI component XAML Phone DatePickerFlyout in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain increased privileges...

Jeffrey Epstein’s Yahoo Inbox Revealed

Plus: ICE deploys secretive phone surveillance tech, officials warn of Chinese surveillance tools in US highway infrastructure, and more...

CVE-2025-36759

Through the provision of user names, SolaX Cloud will suggest similar user accounts and thereby leak sensitive information such as user email addresses and phone numbers...

Cisco Desk/IP/Video Phone Multiple Vulnerabilities (cisco-sa-phone-write-g3kcC5Df)

According to its self-reported version, the remote Cisco Desk, IP or Video Phone running SIP Software is affected by multiple vulnerabilities that could allow an unauthenticated, remote attacker to conduct arbitrary file write and information disclosure attacks. To exploit these vulnerabilities,...