Lucene search
+L

145 matches found

SUSE CVE
SUSE CVE
•added 2026/11/01 12:33 a.m.•4 views

SUSE CVE-2026-116631

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1...

5.8AI score0.00213EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/29 8:41 a.m.•6 views

CVE-2026-116631

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call...

3.4CVSS5.6AI score0.00213EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/26 7:16 p.m.•22 views

CVE-2026-116631

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1...

5.4CVSS0.00213EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/10/26 12:00 a.m.•7 views

Mozilla Firefox for iOS processing logic error vulnerability

Mozilla Firefox for iOS versions prior to 156.1 contain a logic error vulnerability. This vulnerability arises because malicious web pages can open tel links within windows displaying other websites, causing phone call notifications to appear as if they were initiated by those websites...

5.9AI score0.00213EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•10 views

PT-2026-125093

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1...

5.4CVSS5.8AI score0.00213EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•10 views

CVE-2026-78268: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...

7.5CVSS5.7AI score0.00416EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/17 12:00 a.m.•8 views

CVE-2026-28615: Undefined Security Weakness

In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

10CVSS6AI score0.00123EPSS
SaveExploits0References3
Malwarebytes
Malwarebytes
•added 2026/02/06 2:43 p.m.•34 views

Apple Pay phish uses fake support calls to steal payment details

It started with an email that looked boringly familiar: Apple logo, a clean layout, and a subject line designed to make the target’s stomach drop. The message claimed Apple has stopped a high‑value Apple Pay charge at an Apple Store, complete with a case ID, timestamp, and a warning that the...

5.6AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2025/11/24 10:09 p.m.•5 views

Malware in react-native-phone-call

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 10:09 p.m.•16 views

Malicious code in react-native-phone-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e134ec88971e1ecadce79d1699bde00b798633b1ef9a0f6ebb2dbf67a51cdf5 The package react-native-phone-call was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
osv_mal
osv_mal
•added 2025/11/24 10:09 p.m.•21 views

MAL-2025-191003 Malicious code in react-native-phone-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e134ec88971e1ecadce79d1699bde00b798633b1ef9a0f6ebb2dbf67a51cdf5 The package react-native-phone-call was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/11/24 10:09 p.m.•18 views

EUVD-2025-199040

Malicious code in react-native-phone-call npm...

6.6AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2013-4996

Malware in sbrugna...

4.3CVSS5.8AI score0.01362EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2019-18089

Malware in sbrugna...

7.5CVSS7.3AI score0.01344EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2023-46908

Malicious code in bioql PyPI...

5.3CVSS5.9AI score0.01173EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2024-35864

Malicious code in bioql PyPI...

4CVSS6.6AI score0.00188EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2022-25483

Malicious code in bioql PyPI...

7.8CVSS7.4AI score0.00176EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-39480

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.00503EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/04 10:32 p.m.•20 views

CVE-2025-22419

In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

7.3CVSS6AI score0.0008EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2022-22677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS...

4.3CVSS6.3AI score0.00779EPSS
SaveExploits0References2
Rows per page
Query Builder