Lucene search
K

108 matches found

RedhatCVE
RedhatCVE
added 2026/06/10 8:59 a.m.8 views

CVE-2026-41972

Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability...

5.4CVSS5.4AI score0.00155EPSS
Exploits0References1
NVD
NVD
added 2026/06/09 8:16 a.m.12 views

CVE-2026-41972

Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability...

5.4CVSS0.00155EPSS
Exploits0References1
Fedora
Fedora
added 2026/04/16 11:42 p.m.8 views

[SECURITY] Fedora 44 Update: spacebar-6.6.4-1.fc44

Spacebar is a telepathy-qt based SMS application that primarily targets Plasm a Mobile...

5.8AI score
Exploits0
The Hacker News
The Hacker News
added 2025/11/19 3:35 p.m.5 views

Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices

Cybersecurity researchers have disclosed details of a new campaign that leverages a combination of social engineering and WhatsApp hijacking to distribute a Delphi-based banking trojan named Eternidade Stealer as part of attacks targeting users in Brazil. "It uses Internet Message Access Protocol...

6.6AI score
Exploits0
CVE
CVE
added 2025/10/27 8:45 a.m.11 views

CVE-2025-12080

CVE-2025-12080 affects Google Messages for Wear OS when it is the default SMS/MMS/RCS app. The root cause is improper handling of ACTION_SENDTO intents using sms:, smsto:, mms:, and mmsto: URI schemes, enabling an attacker who can invoke an Android intent to covertly send messages on behalf of th...

6.9CVSS6.5AI score0.0015EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/27 8:45 a.m.4 views

EUVD-2025-36129

On Wear OS devices, when Google Messages is configured as the default SMS/MMS/RCS application, the handling of ACTIONSENDTO intents utilizing the sms:, smsto:, mms:, and mmsto: Uniform Resource Identifier URI schemes is incorrectly implemented. Due to this misconfiguration, an attacker capable of...

6.9CVSS6.4AI score0.0015EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.4 views

PT-2025-43907

Name of the Vulnerable Software and Affected Versions Google Messages for Wear OS affected versions not specified Description A flaw exists in Google Messages for Wear OS where the handling of ACTION SENDTO intents using sms:, smsto:, mms:, and mmsto: Uniform Resource Identifier URI schemes is...

6.9CVSS9AI score0.0015EPSS
Exploits0References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-30336

Malware in sbrugna...

6.5CVSS6.5AI score0.01477EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-6868

Malware in sbrugna...

7.5CVSS7.6AI score0.01247EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-48488

Malicious code in bioql PyPI...

3.6CVSS4.7AI score0.00094EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-41285

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00342EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 5:37 a.m.6 views

CVE-2023-44129

The vulnerability is that the Messaging "com.android.mms" app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by launching this activity and then sending a...

3.6CVSS6.9AI score0.00094EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:29 a.m.7 views

CVE-2022-48350

The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentiality...

7.5CVSS6.9AI score0.004EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:36 p.m.2 views

CVE-2022-20439

In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172...

5.5CVSS6.8AI score0.00113EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:34 p.m.9 views

CVE-2021-32665

wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - Self user is added to an existing conversation -...

8.8CVSS6.5AI score0.0048EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:54 p.m.7 views

CVE-2020-9530

An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetAppscom.xiaomi.mipicks mishandles the functionality of opening other components. Attackers need to induce users to open specific web pages in a specific network environment. By jumping to the WebView...

6.5CVSS6.4AI score0.01477EPSS
Exploits0References1
Circl
Circl
added 2025/03/28 3:28 p.m.4 views

CVE-2024-54362

creationtimestamp| type| source ---|---|--- 2025-03-28 15:28:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9375 2025-03-28 17:45:32+00:00| seen| https://t.me/cvedetector/21450...

8.1CVSS8.7AI score0.00412EPSS
Exploits0References2
The Hacker News
The Hacker News
added 2025/03/25 6:33 a.m.18 views

INTERPOL Arrests 306 Suspects, Seizes 1,842 Devices in Cross-Border Cybercrime Bust

Law enforcement authorities in seven African countries have arrested 306 suspects and confiscated 1,842 devices as part of an international operation codenamed Red Card that took place between November 2024 and February 2025. The coordinated effort "aims to disrupt and dismantle cross-border...

8.1AI score
Exploits0
Wired Threat Level
Wired Threat Level
added 2025/01/14 9:0 a.m.5 views

The ‘Largest Illicit Online Marketplace’ Ever Is Growing at an Alarming Rate, Report Says

Huione Guarantee, a gray market researchers believe is central to the online scam ecosystem, now includes a messaging app, stablecoin, and crypto exchange—while facilitating $24 billion in transactions...

7.2AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/12/11 12:0 a.m.2 views

The vulnerability of the GroupMe mobile messaging app, related to insufficient validation of incoming requests, allows a hacker to elevate their privileges.

The vulnerability of the GroupMe mobile messaging app relates to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

10CVSS5.4AI score0.00788EPSS
Exploits0References3
Rows per page
Query Builder