595 matches found
CVE-2022-27332
Summary (CVE-2022-27332): Zammad v5.0.3 contains an access control flaw that allows an unauthenticated attacker to write entries to the CTI caller log, enabling potential phishing attacks or DoS. Root cause: unauthorized access to the CTI logging pathway; impact: log manipulation, phishing, and s...
CVE-2022-27332
An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication. This vulnerability can allow attackers to execute phishing attacks or cause a Denial of Service DoS...
Zammad 访问控制错误漏洞
Zammad is a suite of ticket management software from the German company Zammad. A security vulnerability exists in Zammad version v5.0.3. An unauthenticated attacker could write entries to the CTI caller log...
PT-2022-18379 · Zammad · Zammad
Name of the Vulnerable Software and Affected Versions: Zammad version 5.0.3 Description: An access control issue allows attackers to write entries to the CTI caller log without authentication. This can enable attackers to execute phishing attacks or cause a Denial of Service DoS. Recommendations:...
ASB-A-206492634
imsex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps No phone permissions can obtain some VoLTE sensitive information and manage VoLTE calls...
addVault and removeVault lack validation of caller address
Handle cccz Vulnerability details Impact The addVault and removeVault functions of the ConvexYieldWrapper contract lack validation of the caller address, allowing anyone to add or remove vaults from other addresses function addVaultbytes12 vaultId external address account =...
Design/Logic Flaw
Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call...
Missing access restriction on StabilityPool's receiveCollateral
Handle kenzo Vulnerability details StabilityPool's receiveCollateral should only be called by ActivePool, but that check is missing. Anybody can call it and update StabilityPool's total collateral variable. Impact Wrong amounts of total collateral in StabilityPool totalColl. As far as I can see,...
Robocalls More Than Doubled in 2021, Cost Victims $30B
No surprise to anyone with a phone: Robocalls are rampant. In fact, the number of scam calls more than doubled over the past year, successfully bilking wireless phone customers out of $29.8 billion in 2021 alone. Wireless carrier T-Mobile just released its Scam and Robocall year-end report, and t...
CVE-2021-25520
Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet...
CVE-2021-25521
Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet...
CVE-2021-25520
Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet...
CVE-2021-25521
Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet...
Code injection
Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet...
CVE-2021-25521
Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet...
CVE-2021-25521
CVE-2021-25521 affects Samsung Internet prior to version 16.0.2. The issue is an insecure check in the sharevia deeplink logic, enabling untrusted applications to obtain the user’s current tab URL in Samsung Internet. This is a local issue tied to the deeplink handling, with impact limited to con...
CVE-2021-25520
CVE-2021-25520 affects Samsung Internet prior to version 16.0.2. The vulnerability arises from insecure caller checks and input validation in the SearchKeyword deeplink logic, allowing untrusted applications to execute script code in the browser. The impact is cross-origin script execution with p...
FreeSWITCH 1.10.6 SRTP Packet Denial Of Service
FreeSWITCH susceptible to Denial of Service via invalid SRTP packets - Fixed versions: v1.10.7 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-09-freeswitch-srtp-dos - Vendor Security Advisory:...