PT-2023-27027

Name of the Vulnerable Software and Affected Versions WP Remote Users Sync plugin for WordPress versions up to, and including, 1.2.12 Description The WP Remote Users Sync plugin for WordPress is vulnerable to Server Side Request Forgery via the notify ping remote AJAX function. This can allow...

CVE-2020-0368

In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information disclosure of voicemail metadata with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...