7402 matches found
CVE-2024-53932
The com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme application through 21.1.9 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...
PT-2025-3001 · Unknown · Com.Windymob.Callscreen.Ringtone.Callcolor.Colorphone +1
Name of the Vulnerable Software and Affected Versions: com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes versions 1.1.2 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via th...
CVE-2024-43764
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43764
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43764
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43764
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43764
CVE-2024-43764 affects Google Android where the onPrimaryClipChanged path in ClipboardListener.java could partially bypass the lock screen, enabling local elevation of privilege with no user interaction. Exploitation is described as requiring LOCAL access and LOW privileges with UI:N, and impact ...
PT-2025-20831
Name of the Vulnerable Software and Affected Versions screen affected versions not specified Description The issue allows any user on the system to connect to the screen session for a short time, as the PTY is set to mode 666. Recommendations At the moment, there is no information about a newer...
PT-2025-20832
Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns file existence tests via socket lookup error messages, potentially affecting the screen package in Debian Linux. No information is provided about the estimated numbe...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices, which stems from a failure in the bootloader protection mechanism, allowing a physical...
Malicious Package
Overview zebo is a malicious package. This package steals information from the victim by logging keystrokes and taking screen captures, which are exfiltrated to a server under the attacker's control. Remediation Avoid using all malicious instances of the zebo package. References - Fortinet Report...
WordPress plugin Full Screen Menu for Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-16556 · WordPress · Full Screen Menu For Elementor
Name of the Vulnerable Software and Affected Versions: Full Screen Menu for Elementor plugin for WordPress versions up to, and including, 1.0.7 Description: The Full Screen Menu for Elementor plugin for WordPress has an Information Exposure issue due to insufficient restrictions on which posts ca...
WordPress Full Screen Menu for Elementor plugin <= 1.0.7 - Authenticated (Contributor+) Post Disclosure vulnerability
Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Full Screen Menu for Elementor versions = 1.0.7...
Huawei HarmonyOS UIExtension Module Cross-Process Screen Stack Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the Huawei HarmonyOS UIExtension module, which can be exploited by attackers to compromise confidentiality...
CVE-2024-37773
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...
CVE-2024-54119
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-54119
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...