CamPhish

CamPhish Obtén capturas de la cámara frontal del teléfono de la víctima o de la webcam del PC simplemente enviando un enlace. ¿Qué es CamPhish? CamPhish son técnicas para tomar capturas de la cámara frontal del teléfono de la víctima o de la webcam del PC. CamPhish aloja un sitio web falso en un...

AndroRAT

AndroRAT Strumento di amministrazione remota per Android Androrat è un'applicazione client/server sviluppata in Java Android per il lato client e in Java/Swing per il server. Il nome Androrat è un mix di Android e RAT Remote Access Tool. È stato sviluppato da un team di 4 persone per un progetto...

CVE-2024-24809-Proof-of-concept

Dettaglio CVE-2024-24809 Descrizione Traccar è un sistema di localizzazione GPS open source. Le versioni precedenti alla 6.0 sono vulnerabili a path traversal e upload senza restrizioni di file con tipo pericoloso. Poiché il sistema consente la registrazione per impostazione predefinita, gli...

airo-heat

airoheat Repository del team T1GR3$ all'hackathon di Cybercamp 2018 Presentazione finale a Cybercamp 2018: https://www.youtube.com/watch?v=l-iBtYxHAbQ Video utilizzato a Cybercamp 2018: https://www.youtube.com/watch?v=0DEitQNn7GQ Aircrack-ng Installazione modificata sudo apt-get install...

traccar

Traccar Panoramica Traccar è un sistema di localizzazione GPS open source. Questo repository contiene il servizio back-end basato su Java. Supporta più di 200 protocolli GPS e più di 2000 modelli di dispositivi di localizzazione GPS. Traccar può essere utilizzato con qualsiasi sistema di database...

Traccar - Unrestricted File Upload

Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by registering an account and exploit this...

EUVD-2018-21645

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

CVE-2018-25192

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

CVE-2018-25192

GPS Tracking System 2.12 is vulnerable to SQL injection via the username parameter in login.php, allowing unauthenticated bypass of authentication. The underlying issue is a SQL injection in the login flow, enabling attackers to gain unauthorized access without valid credentials. Reported impact ...

CVE-2018-25192 GPS Tracking System 2.12 SQL Injection via username Parameter

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

CVE-2018-25192 GPS Tracking System 2.12 SQL Injection via username Parameter

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

PT-2026-23702

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

New ZeroDayRAT Mobile Spyware Enables Real-Time Surveillance and Data Theft

Cybersecurity researchers have disclosed details of a new mobile spyware platform dubbed ZeroDayRAT that's being advertised on Telegram as a way to grab sensitive data and facilitate real-time surveillance on Android and iOS devices. "The developer runs dedicated channels for sales, customer...

EUVD-2020-26460

Malware in sbrugna...

EUVD-2025-2572

Malicious code in bioql PyPI...

EUVD-2021-8656

Malicious code in bioql PyPI...

EUVD-2023-55488

Malicious code in bioql PyPI...

CVE-2025-21615

AAT Another Activity Tracker is a GPS-tracking application for tracking sportive activities, with emphasis on cycling. Versions lower than v1.26 of AAT are vulnerable to data exfiltration from malicious apps installed on the same device...

CVE-2020-5246

Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By providing specially crafted input, an attacker can modify the logic of the LDAP query and get admin privileges. The issue only impacts instances wit...

CVE-2025-21615

AAT Another Activity Tracker is a GPS-tracking application for tracking sportive activities, with emphasis on cycling. Versions lower than v1.26 of AAT are vulnerable to data exfiltration from malicious apps installed on the same device...