WordPress افزونه پیامک ووکامرس | Persian WooCommerce SMS plugin 7.2.0-7.3.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Zahid Abbasi in WordPress Plugin Persian Woocommerce SMS versions 7.2.0-7.3.1...

CVE-2026-57199

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, appsms.c copies externally controlled SMS lengths into fixed in-struct buffers without sufficient bounds checks, allowing a...

CVE-2026-111021

The افزونه پیامک ووکامرس | Persian WooCommerce SMS WordPress plugin before 7.3.2 does not sanitise and escape a parameter before reflecting it back into an HTML attribute, leading to Reflected Cross-Site Scripting that is executed in the browser session of a logged-in privileged user who is trick...

CVE-2026-111021

The Persian WooCommerce SMS WordPress plugin (versions 7.2.0-7.3.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to sanitize and escape the 'pwsms_mobiles' parameter before reflecting it back into an HTML attribute . An attacker can trick a logged-in priv...

CVE-2026-111021 Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected XSS via 'pwsms_mobiles' Parameter

The افزونه پیامک ووکامرس | Persian WooCommerce SMS WordPress plugin before 7.3.2 does not sanitise and escape a parameter before reflecting it back into an HTML attribute, leading to Reflected Cross-Site Scripting that is executed in the browser session of a logged-in privileged user who is trick...

DEBIAN-CVE-2026-57199

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, appsms.c copies externally controlled SMS lengths into fixed in-struct buffers without sufficient bounds checks, allowing a...

CVE-2026-57199

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, appsms.c copies externally controlled SMS lengths into fixed in-struct buffers without sufficient bounds checks, allowing a...

CVE-2026-57199

The Asterisk open source private branch exchange and telephony toolkit is vulnerable to memory corruption or a crash due to an out-of-bounds write. In versions prior to 20.20.1 , 21.12.3 , 22.10.1 , 23.4.1 , and Certified Asterisk 20.7-cert11 , 22.8-cert3 , the app_sms.c component copies external...

CVE-2026-57199 Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, appsms.c copies externally controlled SMS lengths into fixed in-struct buffers without sufficient bounds checks, allowing a...

EUVD-2026-111403

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, appsms.c copies externally controlled SMS lengths into fixed in-struct buffers without sufficient bounds checks, allowing a...

android-forensics

android-forensics AFLogical OSE: Open source Android Forensics app and framework The Open Source Edition has been released for use by non-law enforcement personnel, Android aficionados, and forensics gurus alike. It allows an examiner to extract CallLog Calls, Contacts Phones, MMS messages,...

CVE-2026-111461

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands o...

CVE-2026-111461

An OS command injection vulnerability exists in the OnCell G3150A-LTE Series . When SMS management functionality is enabled and configured, an attacker with the required privileges can exploit insufficient input validation to execute arbitrary commands on the affected device. The root cause is an...

CVE-2026-111461 SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands o...

EUVD-2026-110620

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands o...

PT-2026-127241

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, app sms.c copies externally controlled SMS lengths into fixed in-struct buffers without sufficient bounds checks, allowing ...

Moxa OnCell G3150A-LTE Series command injection vulnerability

The Moxa OnCell G3150A-LTE Series version 1.0.0 contains a command injection vulnerability. This vulnerability stems from insufficient input validation in the SMS management functionality, potentially allowing remote attackers with appropriate privileges to execute arbitrary commands...

PT-2026-125887

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands o...

TeleGram-Scraper

Telegram Group Scrapper • API Setup Go to http://my.telegram.org and log in. Click on API development tools and fill the required fields. put app name you want & select other in platform Example : copy "apiid" & "apihash" after clicking create app will be used in setup.py • How To Install and Use...

CVE-2026-116162

Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with master privileges when issuing an SMS multi-factor authentication verification code. An SMS MFA-enrolled user can include extra fields in that request to modify master-key-restricted fields on their ow...