OpenContacts

OpenContacts for Android 連絡先のプライバシーを守ります。 翻訳 このアプリを自分の言語で表示したい場合は、翻訳に協力してください。 概要 このアプリは連絡先をAndroidの連絡先とは別の独自のデータベースに保存します。これにより、他のアプリが連絡先にアクセスできなくなります。デフォルトの電話（ダイヤラー）アプリの代わりに使用できます。 Androidの連絡先アプリからこのアプリへ連絡先をエクスポート/インポートできます。 通話履歴も保持します。なぜなら、Androidの通話履歴アプリでは連絡先の名前が表示されないからです。 また、着信時に相手の名前を表示します...

CVE-2022-44666

Microsoft Windows Contacts VCF/Contact/LDAP syslink 控制 href 属性转义漏洞 CVE-2022-44666 0day. 这是一个关于另一个被遗忘的0day的故事，它在4年多前由 John Page 又名 hyp3rlinxR.1 完全公开。要理解这份报告，你必须考虑我很笨 :- 而我的笨拙驱使我走更长的路来解决简单的问题，但也让我找到了利用某些漏洞的其他方法。我为什么这么说？因为我无法迅速理解创建 .contact 文件的方法只是浏览到联系人文件夹来创建联系人，相反，我利用这些信息首先创建了一个 VCF...

CVE-2026-0075

CVE-2026-0075 ContactsProvider 研究 PoC 一个受控实验室环境下的 Android 研究原型，用于评估 ContactsProvider2 中与 CVE-2026-0075 相关的可观察行为。 概述 CVE-2026-0075 是 ContactsProvider2 中的一个 Android 本地权限提升问题。公开公告描述了一条无需用户交互、即可通过 SQL 注入访问联系人数据库的可能路径。Android 将该问题列为高 危，并指出受影响的 AOSP 版本为 Android 14、15、16 和 16-qpr2。安全补丁级别为 2026-06-05...

CVE-2026-97644

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via Contact Identity Rebinding in all versions up to, and including, 4.9 The vulnerability exists because the createcontact function in the v3 REST endpoint POST /gh/v3/contacts ...

CVE-2026-97644

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 4.9 . The flaw exists because the create_contact function in the v3 REST endpoint (POST /gh/v3/contacts) is only gated by the add_contacts cap...

PT-2026-104494

Name of the Vulnerable Software and Affected Versions Groundhogg — CRM, Newsletters, and Marketing Automation versions prior to 5.0 Description Privilege escalation is possible through contact identity rebinding. The create contact function in the POST /gh/v3/contacts endpoint is only protected b...

cve-2026-28576

CVE-2026-28576：Android 联系人提供程序 SQL 注入与系统性数据窃取 执行摘要 CVE-2026-28576 是 Android 联系人提供程序框架（ContactsProvider2.queryLocal）中的一个严重访问控制漏洞。该缺陷使本地安装的、未声明任何权限 的非特权应用能够窃取整个设备的联系人数据库，包括全名、电话号码、邮寄地址和电子邮件地址。 属性| 值 ---|--- CVE ID| CVE-2026-28576 GHSA ID| GHSA-ph86-9mcx-3p6r Android Bug ID| A-488593616 CWE|...

CVE-2026-28576-poc

CVE-2026-28576：Android 通讯录提供程序中的 SQL 注入 选中一个联系人，泄露全部联系人：一个 targetSdk 兼容性开关将单联系人选择器授权变成完整的通讯录数据库泄露。 Android 17 通过 setStrictColumns / setStrictGrammar 强化了通讯录提供程序以抵御 SQL 注入——但该强化措施被置于一个受 targetSdk 限制的兼容性变更之后（ENFORCESTRICTSQLCHECKS，id 484953293，enableAfterTargetSdk="36"）。任何以 SDK 36...

CVE-2026-87605

A flaw was found in Google Chrome's Contacts feature. A remote attacker, after compromising the renderer process and employing social engineering tactics, could potentially exploit this missing authorization. This could allow the attacker to obtain sensitive user information by tricking a user in...

CVE-2026-9004 WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter

The WP-CRM System – Manage Clients and Projects plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.6 via the 'contactid' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract...

Exploit for SQL Injection in Google Android

CVE-2026-28576 Red Team Tool Zero-permission contacts exfil...

Chromium CVE-2026-87605: Missing authorization in Contacts

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-90495: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance-findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads to sql injection. The attack can be...

PT-2026-89451

import contacts Path Traversal in Groundhogg = 4.7.1 versions...

DEBIAN-CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...