Mail.ru: Account TakeOver at kvartira.city-mobil.ru

kvartira.city-mobil.ru had no sufficient protection against SMS code bruteforce...

CVE-2020-13626

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...

Authorization

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...

CVE-2020-13626

The CVE-2020-13626 entry concerns OnePlus App Locker (up to 2020-10-06). The vulnerability allows physically proximate attackers to exploit Google Assistant to bypass an authorization check and send an SMS while the SMS app is locked. CVSS data provided: CVSS v3.1: AV=Physical, AC=Low, PR=None, U...

CVE-2020-13626

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...

CVE-2020-2297

Jenkins SMS Notification Plugin 1.2 and earlier stores an access token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

CVE-2020-2297

Jenkins SMS Notification Plugin 1.2 and earlier stores an access token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

Design/Logic Flaw

Jenkins SMS Notification Plugin 1.2 and earlier stores an access token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

CVE-2020-2297

Jenkins SMS Notification Plugin 1.2 and earlier stores an access token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

CVE-2020-2297

The CVE-2020-2297 entry concerns Jenkins SMS Notification Plugin versions 1.2 and earlier, where an access token is stored unencrypted in the global configuration file on the Jenkins controller. The file com.hoiio.jenkins.plugin.SMSNotification.xml can be viewed by users with filesystem access, e...

PT-2020-15527 · Jenkins · Jenkins Sms Notification Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins SMS Notification Plugin versions 1.2 and earlier Description: The issue concerns the storage of an access token in an unencrypted form within the global configuration file on the Jenkins controller. Specifically, the file...

Ozeki NG SMS Gateway Directory Traversal (CVE-2020-14028)

A directory traversal vulnerability exists in Ozeki NG SMS Gateway. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server...

sms-advisors.com Cross Site Scripting vulnerability OBB-1385816

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-14030

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By generating and writing to the disk malicious .NET serialized files, an attacker can trick the product into deserializing them, resulting in arbitrary code executi...

CVE-2020-14030

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By generating and writing to the disk malicious .NET serialized files, an attacker can trick the product into deserializing them, resulting in arbitrary code executi...

CVE-2020-14030

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By generating and writing to the disk malicious .NET serialized files, an attacker can trick the product into deserializing them, resulting in arbitrary code executi...

CVE-2020-14030

The CVE-2020-14030 issue affects Ozeki NG SMS Gateway (up to version 4.17.6). The vulnerability stems from storing SMS messages in .NET serialized format on the filesystem and then deserializing malicious .NET serialized files written to disk, which can trigger arbitrary code execution upon deser...

Ozeki NG SMS Gateway Arbitrary File Deletion Vulnerability

Ozeki NG SMS Gateway is a powerful, reliable and flexible SMS gateway application. An arbitrary file deletion vulnerability exists in the Outbox feature of the TXT File module in Ozeki NG SMS Gateway 4.17.6 and earlier versions. An attacker can exploit this vulnerability to delete all/most files ...

Ozeki NG SMS Gateway Cross-Site Request Forgery Vulnerability

Ozeki NG SMS Gateway is a powerful, reliable and flexible SMS gateway application. A cross-site request forgery vulnerability exists in Ozeki NG SMS Gateway 4.17.6 and earlier versions. An attacker can use this vulnerability to trick an administrator into installing a new module or changing a...

Ozeki NG SMS Gateway Server-Side Request Forgery Vulnerability

Ozeki NG SMS Gateway is a powerful, reliable and flexible SMS gateway application. A server-side request forgery vulnerability exists in Ozeki NG SMS Gateway 4.17.6 and earlier versions. The vulnerability can be exploited to conduct server-side request forgery attacks via SMS WCF or RSS To SMS...