CVE-2025-58488

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability...

CVE-2025-58488

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability...

CVE-2025-58488

The connected Red Hat, NVD, CVE Registry, and vendor records confirm CVE-2025-58488 affects Samsung SmartTouchCall prior to version 1.0.1.1. The root cause is improper verification of the origin of a communication channel, which could allow a remote attacker to access sensitive information. Explo...

EUVD-2025-200130

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability...

PT-2025-48606

Name of the Vulnerable Software and Affected Versions SmartTouchCall versions prior to 1.0.1.1 Description A flaw exists in the verification process of communication channels within SmartTouchCall. This issue allows remote attackers to potentially access sensitive information. User interaction is...

The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to bypass existing security restrictions.

The vulnerability of the Downloads component in the Google Chrome browser is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions through a specially created HTML page...

The vulnerability of Google Chrome, related to the lack of a mechanism for verifying the source, allows a hacker to replace the user’s interface.

The vulnerability of Google Chrome is related to a lack of mechanisms for verifying the source of the page. Exploiting this vulnerability allows an attacker to replace the user’s interface with a specially created HTML page...

UBUNTU-CVE-2025-31133

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount i.e., the container's /dev/null was...

The vulnerability of the open_actions.py file of the GPU KiTTY-based terminal emulator allows a hacker to execute arbitrary code.

The vulnerability of the openactions.py file of the GPU KiTTY-based terminal emulator is related to a deficiency in the source verification mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability in the web interface of the Cisco Unified Communications Manager (CM) and Cisco Unified Communications Manager Session Management Edition (SME) systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Web interface for managing Cisco Unified Communications Manager CM and Cisco Unified Communications Manager Session Management Edition SME systems is related to insufficient verification of the HTTP request source. Exploiting this vulnerability could allow a malicious act...

EUVD-2005-2146

Malware in sbrugna...

EUVD-2021-18938

Malware in sbrugna...

EUVD-2019-7042

Malware in sbrugna...

The vulnerability in the management of microprogrammed software on Cisco Wireless Access Points arises from insufficient verification of the communication channel source. This allows a hacker to replace the IPv6 gateway on the vulnerable device.

The vulnerability in the management of microprogrammed software on Cisco Wireless Access Points is related to insufficient verification of the communication channel source. Exploiting this vulnerability allows a malicious actor to remotely modify the IPv6 gateway on the vulnerable device...

The vulnerability of the pgAdmin 4 database management tool, related to a lack of mechanism for source verification, allows attackers to gain unauthorized access to protected information.

The vulnerability of the pgAdmin 4 database management tool is related to a lack of mechanisms for verifying the source of the connection. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of SAP NetWeaver Application Server Java, related to insufficient verification of communication source, allows attackers to disclose protected information.

The vulnerability of SAP NetWeaver Application Server Java is related to insufficient checks on the source of the communication channel. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

📄 Piciorgros TMO-100 Configuration Change

Piciorgros TMO-100 allows for an unauthorized configuration change via TFTP. This issue affects versions prior to 4.20. Classification -------------- - CWE-306: Missing Authentication for Critical Function - CWE-940: Improper Verification of Source of a Communication Channel - CWE-200: Exposure o...

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to deficiencies in the data source verification mechanism. This allows a hacker to execute arbitrary code.

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to deficiencies in the data source verification mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code with administrator privileges remotely...

CVE-2024-38886

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Traffic Injection attack due to improper verification of the source of a communication channel...

CVE-2024-36506

An improper verification of source of a communication channel vulnerability CWE-940 in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to bypass the trusted host feature via session connection...