Lucene search
+L

2967 matches found

EUVD
EUVD
added 2026/09/02 12:32 p.m.7 views

EUVD-2026-70012

Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...

5.9CVSS5.9AI score0.00199EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 12:32 p.m.14 views

CVE-2026-76755

Drupal Gammu SMS Daemon (a Drupal contrib module) has an unpatched security vulnerability. The project has been marked unsupported by the Drupal security team, meaning the maintainer has not addressed the flaw and no fixed version is currently available. The CVSS 3.1 score is 5.9 (MEDIUM) , with ...

5.9CVSS5.9AI score0.00199EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2026/09/01 12:00 a.m.16 views

Johnny Still Receives Spam SMS: Assessing the Robustness of SMS Spam Detection

SMS spam detection systems often achieve high accuracy in controlled environments but struggle against adversarial attacks and increasingly sophisticated spam tactics in real-world deployments. In this paper, we evaluate the robustness of SMS anti-spam systems that end users actually rely on,...

5.9AI score
SaveExploits0
OSV
OSV
added 2026/09/01 12:00 a.m.3 views

ASB-A-418776187

In queryInternal of MmsSmsProvider.java, there is a possible way to access MMS/SMS data across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score
SaveExploits0References1
NVD
NVD
added 2026/08/31 9:17 p.m.12 views

CVE-2026-81756

Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms = 5.1.24 versions...

9.3CVSS0.0025EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/31 8:30 p.m.20 views

EUVD-2026-68784

Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms = 5.1.24 versions...

9.3CVSS5.9AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/31 8:30 p.m.43 views

CVE-2026-81756

An unauthenticated SQL injection vulnerability exists in the WordPress plugin Smart Marketing SMS and Newsletters Forms in versions

9.3CVSS5.9AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/31 8:30 p.m.36 views

CVE-2026-81756 WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.1.24 - SQL Injection vulnerability

Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms = 5.1.24 versions...

9.3CVSS0.0025EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/08/28 2:51 p.m.8 views

WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.1.24 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Smart Marketing SMS and Newsletters Forms versions = 5.1.24...

9.3CVSS5.9AI score0.0025EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/08/25 9:17 a.m.9 views

CVE-2026-63587

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

8.8CVSS0.00269EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 8:55 a.m.7 views

EUVD-2026-65329

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

8.8CVSS5.5AI score0.00269EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/25 8:55 a.m.35 views

CVE-2026-63587 SMS Password Authorization Bypass via Failed Attempt Counter

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

8.8CVSS0.00269EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/25 8:55 a.m.35 views

CVE-2026-63587

IE-SR-2TX-WL-4G devices contain a logic flaw in their SMS password authorization mechanism. When the 'Enable Password Authorization' setting is active, the device increments a retry counter on each failed password attempt. After 5 consecutive failures , SMS password authorization is automatically...

8.8CVSS5.6AI score0.00269EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in ofono

A flaw was discovered in ofono, an open-source telephony software for Linux. A stack overflow bug was triggered within the decodedeliverreport function during SMS decoding. It is assumed that the attack scenario can be executed from a compromised modem, a malicious base station, or simply through...

8.1CVSS7.2AI score0.00943EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerability in ofono

oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

7.8CVSS7.5AI score0.0025EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in ofono

A flaw was discovered in ofono, an open-source telephony software for Linux. A stack overflow bug was triggered within the decodesubmitreport function during SMS decoding. It is assumed that the attack scenario can be executed from a compromised modem, a malicious base station, or simply through...

8.1CVSS7.1AI score0.01149EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in ofono

A flaw was discovered in ofono, an open-source telephony software for Linux. A stack overflow bug occurs within the decodedeliver function during SMS decoding. It is assumed that the attack scenario can be executed from a compromised modem, a malicious base station, or simply through SMS. There i...

8.1CVSS7.1AI score0.0125EPSS
SaveExploits1References2
Malwarebytes
Malwarebytes
added 2026/08/19 9:39 a.m.16 views

Your polite reply to that text is worth $2 on the dark web

Most wrong-number texts are harmless. Some are the first step in a carefully planned scam. By replying, you may be confirming that your number is active and that you're willing to engage with strangers, making you a more valuable target for future fraud. Here's why a polite response can be worth...

5.4AI score
SaveExploits0
NVD
NVD
added 2026/08/13 2:17 p.m.14 views

CVE-2026-66424

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

9.8CVSS0.00321EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 1:36 p.m.56 views

CVE-2026-66424

CVE-2026-66424 affects the WordPress plugin SMS Alert Order Notifications (versions

9.8CVSS5.2AI score0.00321EPSS
SaveExploits0References1
Rows per page
Query Builder