274 matches found
CVE-2025-23742 WordPress Podamibe Twilio Private Call plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Podamibe Nepal Podamibe Twilio Private Call podamibe-twilio-private-call allows Reflected XSS.This issue affects Podamibe Twilio Private Call: from n/a through = 1.0.1...
CVE-2025-23742 WordPress Podamibe Twilio Private Call plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Podamibe Nepal Podamibe Twilio Private Call podamibe-twilio-private-call allows Reflected XSS.This issue affects Podamibe Twilio Private Call: from n/a through = 1.0.1...
CVE-2025-23742
Technical details are not publicly provided in the connected documents. CVE-2025-23742 describes a Reflected XSS affecting Podamibe Twilio Private Call (WordPress plugin) up to version 1.0.1; no exploit vectors or fixes are detailed in the supplied materials.
WordPress plugin Podamibe Twilio Private Call 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...
PT-2025-7001 · Twilio · Podamibe Twilio Private Call
Name of the Vulnerable Software and Affected Versions: Podamibe Twilio Private Call versions 1.0.1 and earlier Description: The issue affects Podamibe Twilio Private Call, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site...
Exploit for Server-Side Request Forgery in Rocket.Chat
CVE-2024-39713: Rocket.Chat SSRF PoC Description A Server...
CVE-2024-39713
A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1...
Malicious code in twilio.github.io (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9608b17ef2cbe6a3b456206f03293337dd943e0de3a5924552bebc9b3eb01fff Any computer that has this package installed or running should be considered...
MAL-2025-1052 Malicious code in twilio.github.io (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9608b17ef2cbe6a3b456206f03293337dd943e0de3a5924552bebc9b3eb01fff Any computer that has this package installed or running should be considered...
WordPress Podamibe Twilio Private Call plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Podamibe Twilio Private Call versions = 1.0.1...
Malicious code in twilio-voice-react-native-reference-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9657ad82a767c729a41687ce64fc66b8d9727da18bc576e49a6c362582772d0 The OpenSSF Package Analysis project identified 'twilio-voice-react-native-reference-server' @ 1.1.0 npm as malicious. It is considered maliciou...
MAL-2024-12124 Malicious code in twilio-voice-react-native-reference-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9657ad82a767c729a41687ce64fc66b8d9727da18bc576e49a6c362582772d0 The OpenSSF Package Analysis project identified 'twilio-voice-react-native-reference-server' @ 1.1.0 npm as malicious. It is considered maliciou...
Feds Charge Five Men in ‘Scattered Spider’ Roundup
Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass , MailChimp , Okta , T-Mobile and Twilio. A visu...
AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services
The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware. "This botnet utilizes remote code execution and credential-stealing methods to maintain persistent...
VulnCheck KEV: CVE-2024-39713
A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1...
Customer’s Use of Flawed 3rd-Party Tool Exposes 12K Twilio Call Records, Recordings
A hacker has leaked 12,000 alleged Twilio call records, including phone numbers and audio recordings. The breach exposes…...
Xeon Sender Tool Exploits Cloud APIs for Large-Scale SMS Phishing Attacks
Malicious actors are using a cloud attack tool named Xeon Sender to conduct SMS phishing and spam campaigns on a large scale by abusing legitimate services. "Attackers can use Xeon to send messages through multiple software-as-a-service SaaS providers using valid credentials for the service...
The vulnerability of the final point of the application software interface of a two-factor authentication system based on generating security tokens with Twilio Authy allows a perpetrator to disclose sensitive information.
The vulnerability of the final point of the application software interface for two-factor authentication based on token generation by Twilio Authy is related to the disclosure of information due to incompatibility. Exploiting this vulnerability could allow a malicious actor to disclose the...
