3402 matches found
CVE-2026-94258
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to...
CVE-2026-94258
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to...
CVE-2026-94258 SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to...
Vaim-sms
Vaim-sms What is Vaim-sms ? This is sms bomber who send otp in target phone number unlimitly. Many times you just want to annoy or play a prank on your friends. If you find yourself in that situation then this SMS Bomber is the perfect tool for you! You can send unlimited SMS to anyone. This...
CVE-2024-8122
The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). Because unused OTPs remain valid indefinitely, malicious actors can conduct brute force attacks by repeatedly guessing the code over an unlimited timeframe....
EUVD-2024-55782
The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords OTPs used in multi-factor authentication MFA. This allows unused OTPs to remain valid indefinitely, presenting an opportunity for malicious actors to conduct brute force attacks by repeatedly guessing the...
signal-without-smartphone
Configurer Signal sans smartphone Une application de bureau pour enregistrer un compte Signal et le lier à Signal Desktop, le tout sans nécessiter de smartphone. Cet utilitaire évite d'avoir besoin d'un téléphone intelligent , mais nécessitera tout de même un moyen de recevoir des SMS pendant la...
SDK-SMS-Stack
SMS Stack Sms Stack est un framework qui apporte des caractéristiques basées sur TPC/IP au service de messages courts GSM. Ce framework fonctionne dans plusieurs environnements pour offrir une intégration complète en pile dans un service. La couche principale intègre des techniques pour contrôler...
fake-sms
Fake-SMS Un outil en ligne de commande simple qui vous permet de contourner la vérification SMS par numéro de téléphone en utilisant un numéro temporaire agissant comme un proxy. Mise à jour récente : L'outil n'utilise plus upmasked.com, car le service est tombé. Nous utilisons un autre fournisse...
Chinese-Cybercrime-Research
Исследование китайского киберкриминала Ресурсы для изучения китайскоязычных киберпреступных группировок. Фишинг Фишинговые комплекты YYlaiyu https://cloud.google.com/blog/topics/threat-intelligence/chinese-language-phishing-services...
FMD Android
FMD Android Находите ваше устройство через SMS, мессенджеры или веб-интерфейс FMD Server. FMD позволяет вам определять местоположение, подавать звуковой сигнал, стирать данные и отправлять другие команды на ваше устройство, когда оно потеряно. Это безопасная альтернатива с открытым исходным кодом...
SMShell
SMShell Preuve de concept d'un shell basé sur SMS. Envoyez des commandes et recevez des réponses par SMS depuis des ordinateurs équipés de connexion mobile large bande. Cet outil est né d'une inspiration lors d'une recherche sur les implications de sécurité de l'eSIM menée par Markus Vervier,...
BetterAndroRAT
Better Android RAT Dendroid Based Android Remote Access Trojan Вся ответственность лежит на вас. Пожалуйста, используйте только в исследовательских целях. Возможности Удаленное обновление и установка приложений Удаленная веб-камера Удаленная запись микрофона Удаленное управление файлами Удаленные...
SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation
The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updati...
Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read
An arbitrary file read vulnerability, also known as a "path traversal" or "directory traversal" vulnerability, occurs when an attacker is able to access files on a system that they shouldn't have access to. This vulnerability arises from improper input validation or insufficient access controls i...
SMSOTPBOT
ghost-OTPBOT ghost-OTPBOT — это самый продвинутый и многофункциональный бот для перехвата OTP и SMS-кодов, способный получать OTP и SMS-коды от жертв, выдавая себя за компанию или банк. Вы можете использовать его для получения OTP для логинов, банков, кредитных карт, Apple Pay и многого другого...
AndroRAT
AndroRAT Android용 원격 관리 도구 Androrat는 클라이언트/서버 애플리케이션으로, 클라이언트 측은 Java Android로, 서버는 Java/Swing으로 개발되었습니다. 이름 Androrat는 Android와 RATRemote Access Tool의 혼합어입니다. 4명의 팀이 대학 프로젝트를 위해 개발했으며, 한 달 만에 완성되었습니다. 이 애플리케이션의 목표는 Android 시스템을 원격으로 제어하고 시스템에서 정보를 수집하는 것입니다. 기술 사항 Android 애플리케이션은 모든 연결을 수신하는 서버의...
androrat
Я в процессе интернационализации, добро пожаловать присоединиться. Androrat Форк/Тихая версия Remote Administration Tool for Android Androrat — это клиент/серверное приложение, разработанное на Java Android для клиентской части и на Java/Swing для сервера. Название Androrat — это смесь Android и...
CVE-2026-11387
CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ Élévation de privilèges non authentifiée via réinitialisation arbitraire de mot de passe ☆ === Beelze === 📋 Informations de vulnérabilité Champ| Détails ---|--- CVE ID| CVE-2026-11387 Score CVSS| 9.8 Critique Vecteur CVSS|...