CVE-2017-9101

PlaySMS 1.4 authenticated RCE Simple method of performing remote code execution through the Phonebook CSV upload issue as described on ExploitDB. Either run a single command: % python3 playsmshell.py --url http://localhost/playsms --password playwithsms -c 'id' Grabbing CSRF token for login...

[SECURITY] Fedora 45 Update: plasma-phonebook-26.08.2-2.fc45

Contacts application which allows adding, modifying and removing contacts...

WinRM Gather VPN Profiles

List VPN connections and rasphone.pbk phonebooks through WinRM !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.winrm.winrmsessionmixin import WinRMSessionMixin import re class ModulePost, WinRMSessionMixin: info = "name": "WinRM Gather VPN Profiles",...

Windows Gather VPN Profiles

List VPN connections via Get-VpnConnection and dump rasphone.pbk phonebook files on a Windows shell or Meterpreter session. !/usr/bin/env python3 -- coding: utf-8 -- """ Extract saved VPN connection details from a Windows session. """ from kittysploit import from lib.post.windows.session import...

CVE-1999-0715

Buffer overflow in Remote Access Service RAS client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry...

EUVD-2017-14322

Malware in sbrugna...

EUVD-1999-0696

Malware in sbrugna...

EUVD-2001-0820

Malware in sbrugna...

EUVD-2011-2332

Malware in sbrugna...

EUVD-2011-4218

Malware in sbrugna...

EUVD-2024-47375

Malicious code in bioql PyPI...

ASR Microelectronics Network Board Resource Leak

The vulnerability of microprogrammed network board software from ASR Microelectronics, including models ASR1803L, ASR1806, ASR1901, and ASR1903L, stems from improper cleaning or release of resources during the processing of the pb.c file router/phonebook/pb.c. Exploiting this vulnerability can...

CVE-2023-28912 Cleartext Phonebook Information

The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution privilege on the system or physical access to the system to obtain vehicle owner's contact data. The vulnerability was originally discovered in Skoda Superb III car with MIB3...

CVE-2023-28912 Cleartext Phonebook Information

The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution privilege on the system or physical access to the system to obtain vehicle owner's contact data. The vulnerability was originally discovered in Skoda Superb III car with MIB3...

CVE-2024-6251

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main=featurephonebook=phonebooklist of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site scripting...

CVE-2011-2343

The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain contact information via an AT phonebook transfer...

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when processing a request to update a SIM PB record...

PT-2024-25076 · Qualcomm · Snapdragon +16

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: There is a memory corruption issue when handling the request to update SIM PB records. This issue occurs while processing the update SIM PB records...

CVE-2024-6251

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&inc=featurephonebook&op=phonebooklist of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site...

CVE-2024-6251 playSMS New Phonebook cross site scripting

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&inc=featurephonebook&op=phonebooklist of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site...