CVE-2021-4438

A vulnerability, which was classified as critical, has been found in kyivstarteam react-native-sms-user-consent up to 1.1.4 on Android. Affected by this issue is the function registerReceiver of the file android/src/main/java/ua/kyivstar/reactnativesmsuserconsent/SmsUserConsentModule.kt. The...

CVE-2021-4438 kyivstarteam react-native-sms-user-consent SmsUserConsentModule.kt registerReceiver improper export of android application components

A vulnerability, which was classified as critical, has been found in kyivstarteam react-native-sms-user-consent up to 1.1.4 on Android. Affected by this issue is the function registerReceiver of the file android/src/main/java/ua/kyivstar/reactnativesmsuserconsent/SmsUserConsentModule.kt. The...

CVE-2021-4438 kyivstarteam react-native-sms-user-consent SmsUserConsentModule.kt registerReceiver improper export of android application components

A vulnerability, which was classified as critical, has been found in kyivstarteam react-native-sms-user-consent up to 1.1.4 on Android. Affected by this issue is the function registerReceiver of the file android/src/main/java/ua/kyivstar/reactnativesmsuserconsent/SmsUserConsentModule.kt. The...

CVE-2021-4438

CVE-2021-4438 affects kyivstarteam/react-native-sms-user-consent up to 1.1.4 on Android. The issue lies in SmsUserConsentModule.kt, registerReceiver, causing improper export of Android components. Local attack is required. Upgrading to version 1.1.5 fixes the vulnerability (patch: 5423dcb0cd3e4d5...

React Native Sms User Consent 安全漏洞

React Native Sms User Consent is an open source library by Kyivstar Tech Digital. A security vulnerability exists in React Native Sms User Consent 1.1.4 and earlier versions, which stems from a security issue in the registerReceiver function in...

sms-contest.ir Cross Site Scripting vulnerability OBB-3902641

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WP SMS < 6.6.3 - Cross-Site Request Forgery

Description The WP SMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.6.2. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request grante...

sms-platby.eu Cross Site Scripting vulnerability OBB-3896544

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-33099

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR...

CVE-2023-33099 Improper Input Validation in Multi-Mode Call Processor

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR...

CVE-2023-33099

CVE-2023-33099 describes a transient Denial of Service in Qualcomm chipsets caused by processing an SMS container of non-standard size over DL NAS transport in NR. The entry appears under Qualcomm closed-source components with a High impact rating (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). ...

CVE-2023-33099 Improper Input Validation in Multi-Mode Call Processor

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR...

Vultur Android Banking Trojan Returns with Upgraded Remote Control Capabilities

The Android banking trojan known as Vultur has resurfaced with a suite of new features and improved anti-analysis and detection evasion techniques, enabling its operators to remotely interact with a mobile device and harvest sensitive data. "Vultur has also started masquerading more of its...

PT-2024-12406 · Qualcomm · 315 5G Iot Modem Firmware +102

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS that occurs while processing an SMS container of non-standard size received in the Downlink DL...

CVE-2024-30454

Cross-Site Request Forgery CSRF vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.6.2...

CVE-2024-30454

Cross-Site Request Forgery CSRF vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.6.2...

CVE-2024-30454 WordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.6.2...

CVE-2024-30454

CVE-2024-30454 is a CSRF vulnerability reported for VeronaLabs WP SMS. The connected Red Hat entry confirms the issue description and states the vulnerability affects WP SMS versions up to 6.6.2 (no details on fixed/patched version are provided in the documents). The initial description also note...

CVE-2024-30454 WordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.6.2...

Telegram Offers Premium Subscription in Exchange for Using Your Number to Send OTPs

In June 2017, a study of more than 3,000 Massachusetts Institute of Technology MIT students published by the National Bureau for Economic Research NBER found that 98% of them were willing to give away their friends' email addresses in exchange for free pizza. "Whereas people say they care about...