20433 matches found
CVE-2024-46921
The CVE-2024-46921 issue affects Samsung Mobile Processor and Modem lines (Exynos 9820/9825/980/990/1080/2100/1280/2200/1330/1380/1480/2400/9110/W1000 and Modem 5123/5300/5400). The vulnerability is that the UE does not throttle the number of attempts for the 5G SA RRC Setup procedure, which can ...
CVE-2024-46920
The CVE-2024-46920 issue affects Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Root cause: a missing length check causes a stack out-of-bounds write at loadInputBuffers. This has been consistently reported across multiple feeds (NVD/Red Hat/CNNVD) with no explic...
CVE-2024-48883
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, and Modem 5300. The UE incorrectly handles a malformed uplink scheduling message, resulting in ...
CVE-2024-55494
A PHP Code Injection vulnerability that can lead to Remote Code Execution RCE and XSS in Opencode Mobile Collect Call v5.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the opfunc parameter at /occontrolpanel/index.php...
CVE-2024-55494
A PHP Code Injection vulnerability that can lead to Remote Code Execution RCE and XSS in Opencode Mobile Collect Call v5.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the opfunc parameter at /occontrolpanel/index.php...
Opencode Mobile Collect Call 安全漏洞
Opencode Mobile Collect Call is a mobile payphone solution from Opencode. A security vulnerability exists in Opencode Mobile Collect Call version v5.4.7. An attacker can exploit this vulnerability to execute arbitrary web script or HTML via a specially crafted payload injected into the opfunc...
CVE-2024-55494
A PHP Code Injection vulnerability that can lead to Remote Code Execution RCE and XSS in Opencode Mobile Collect Call v5.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the opfunc parameter at /occontrolpanel/index.php...
Infoblox BloxOne 安全漏洞
Infoblox BloxOne is a lightweight mobile agent from Infoblox USA. redirects DNS traffic from remote devices to the BloxOne Threat Defense Cloud. A security vulnerability exists in Infoblox BloxOne version v2.4 that stems from flawed business logic...
PT-2025-3120 · Opencode · Opencode Mobile Collect Call
Name of the Vulnerable Software and Affected Versions: Opencode Mobile Collect Call version 5.4.7 Description: The issue allows attackers to execute arbitrary web scripts or HTML, potentially leading to Remote Code Execution RCE and cross-site scripting XSS. This can be achieved by injecting a...
CVE-2024-55494
CVE-2024-55494 affects Opencode Mobile Collect Call v5.4.7. A PHP Code Injection vulnerability allows an attacker to inject code via a crafted payload into the op_func parameter at /occontrolpanel/index.php, enabling potential Remote Code Execution and XSS. The issue is documented across multiple...
CVE-2025-22550
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Rhoney AddFunc Mobile Detect addfunc-mobile-detect allows Stored XSS.This issue affects AddFunc Mobile Detect: from n/a through = 3.1...
CVE-2025-22550 WordPress AddFunc Mobile Detect plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AddFunc AddFunc Mobile Detect allows Stored XSS.This issue affects AddFunc Mobile Detect: from n/a through 3.1...
CVE-2025-22550 WordPress AddFunc Mobile Detect plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Rhoney AddFunc Mobile Detect addfunc-mobile-detect allows Stored XSS.This issue affects AddFunc Mobile Detect: from n/a through = 3.1...
CVE-2025-22550
CVE-2025-22550 affects AddFunc Mobile Detect (WordPress plugin). The issue is a Stored Cross-Site Scripting vulnerability in AddFunc Mobile Detect <= 3.1, caused by improper input neutralization during web page generation. Impact is stored XSS as described in multiple sources; no public exploi...
Vulnerabilities fixed in Google Android and Samsung Mobile
Google has fixed vulnerabilities in Android. Included in this update are updates to closed-source components from Qualcomm, Imagination Technologies and MediaTek. Samsung has fixed vulnerabilities in Samsung Mobile that are relevant to Samsung mobile devices. A malicious party can exploit the...
WordPress AddFunc Mobile Detect plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin AddFunc Mobile Detect versions = 3.1...
Crater 代码问题漏洞
Crater is an open source web and mobile application from Crater Invoice Open Source. It is used to track expenses, make payments and create professional invoices and estimates. Crater has a code issue vulnerability. An attacker exploiting this vulnerability could remotely execute commands...
PT-2025-4541 · Addfunc · Addfunc Mobile Detect
Name of the Vulnerable Software and Affected Versions: AddFunc Mobile Detect versions n/a through 3.1 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS in AddFunc Mobile Detect...
AIMS eCrew 安全漏洞
AIMS eCrew is an AIMS native mobile application for Google devices from AIMS. AIMS eCrew has a security vulnerability that originates from improper access control...
WordPress plugin AddFunc Mobile Detect 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...