CVE-2026-9004 WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter

The WP-CRM System – Manage Clients and Projects plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.6 via the 'contactid' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract...

EUVD-2008-7139

Malware in sbrugna...

PT-2014-2522

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.5.10 ownCloud versions 5.x prior to 5.0.5 Description The contacts application in ownCloud does not properly check the ownership of contacts. This allows remote authenticated users to download arbitrary contacts vi...

CVE-2013-5164

Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the locked state, and dial the telephone numbers in arbitrary Contacts entries, by visiting the Contacts pane...