WordPress WooCommerce OTP Login With Phone Number, OTP Verification plugin <= 1.8.47 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Login with phone number versions = 1.8.47...

Malicious code in @lbnqduy/curly-octo-rotary-phone (npm)

The package @lbnqduy/curly-octo-rotary-phone was found to contain malicious code...

Malicious code in @lbnqduy/stunning-rotary-phone (npm)

The package @lbnqduy/stunning-rotary-phone was found to contain malicious code...

MAL-2025-8325 Malicious code in @lbnqduy/curly-octo-rotary-phone (npm)

The package @lbnqduy/curly-octo-rotary-phone was found to contain malicious code...

Malicious code in phone-scrape-dll (npm)

The package phone-scrape-dll was found to contain malicious code...

MAL-2025-29157 Malicious code in phone-scrape-dll (npm)

The package phone-scrape-dll was found to contain malicious code...

MAL-2025-8350 Malicious code in @lbnqduy/stunning-rotary-phone (npm)

The package @lbnqduy/stunning-rotary-phone was found to contain malicious code...

CLSA-2025-1755113613 bluez: Fix of 2 CVEs

CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone Book Access profile by adding proper validation of user-supplied data length before copying to buffer - CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book Access profile to prevent arbitrary...

Netgear SPH200D Directory Traversal Vulnerability

The Netgear SPH200D is a wireless Internet phone from Netgear USA. The Netgear SPH200D suffers from a directory traversal vulnerability that can be exploited by an attacker to view arbitrary files on the system by sending a crafted URL request...

CVE-2025-8393

A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishing TLS communication which may result in man-in-the-middle attacks on untrusted networks. Captured communications may include user credentia...

CVE-2023-41528

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters...

CVE-2025-8393

CVE-2025-8393 describes a TLS trust issue in the Dreame Technology mobile apps (iOS/Android) used to manage a connected device. The phone application accepts self-signed certificates during TLS, which can enable man‑in‑the‑middle attacks on untrusted networks and may lead to exposure of user cred...

PT-2025-32374 · Unknown · Phone Application

Name of the Vulnerable Software and Affected Versions: Phone application affected versions not specified Description: A TLS vulnerability exists in the phone application used to manage a connected device. The application accepts self-signed certificates when establishing TLS communication,...

CVE-2025-8393: Improper Certificate Validation

A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishing TLS communication which may result in man-in-the-middle attacks on untrusted networks. Captured communications may include user credentia...

HackerOne: DOS via Mutation Aliasing in GraphQL Account Recovery Phone Number Verification API

The GraphQL API's 'verifyAccountRecoveryPhoneNumber' mutation was found to be vulnerable to denial-of-service attacks through mutation aliasing. The vulnerability allowed multiple aliases of the same mutation to be included in a single request, causing the server to process each mutation...

CVE-2013-10063

A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions = 1.0.4.80 in its embedded web server. Authenticated attackers can exploit crafted GET requests to access arbitrary files outside the web root by injecting traversal sequences. This can expose sensitive...

The vulnerability of D-Link DPH-400S and DPH-400SE VoIP phones, which stems from the disclosure of information through registration files, allows attackers to disclose the protected information.

The vulnerability of D-Link DPH-400S and DPH-400SE VoIP phones lies in the ability to disclose information through registration files. Exploiting this vulnerability allows a remote attacker to disclose the protected information...

How the FBI got everything it wanted (re-air) (Lock and Code S06E15)

This week on the Lock and Code podcast… For decades, digital rights activists, technologists, and cybersecurity experts have worried about what would happen if the US government secretly broke into people’s encrypted communications. The weird thing, though, is that, in 2018, it already happened...

Exam Form Submission dashboard.php file SQL injection vulnerability

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the phone parameter in the /user/dashboard.php file not being securely filtered. No details of the vulnerability are available at this time...

Code-Projects Exam Form Submission 注入漏洞

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the phone parameter in the /user/dashboard.php file not being securely filtered. No details of the vulnerability are available at this time...