CVE-2026-100192

X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field filtering. Unauthenticated attackers can retrieve these credentials and use them to send arbitrary SMS messages through any tenant's SMS provider,...

EUVD-2026-87253

X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field filtering. Unauthenticated attackers can retrieve these credentials and use them to send arbitrary SMS messages through any tenant's SMS provider,...

CVE-2026-100192 X-SpringBoot through 6.0 Credential Exposure via Unauthenticated Endpoint

X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field filtering. Unauthenticated attackers can retrieve these credentials and use them to send arbitrary SMS messages through any tenant's SMS provider,...

CVE-2026-100192

X-SpringBoot versions through 6.0 are vulnerable to credential exposure via the GET /application/manager/select endpoint. The root cause is a lack of authentication and field filtering , allowing unauthenticated attackers to retrieve appKey and appSecret credentials. Successful exploitation enabl...

CVE-2026-100192 X-SpringBoot through 6.0 Credential Exposure via Unauthenticated Endpoint

X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field filtering. Unauthenticated attackers can retrieve these credentials and use them to send arbitrary SMS messages through any tenant's SMS provider,...

TBomb

TBomb v2.1b 무료 오픈소스 SMS/전화 폭탄 발송 애플리케이션 공지 중요 공지: 저품질 기여, 스팸 풀 리퀘스트/이슈, 그리고 새로운 프로젝트 탐색으로 인해 이 저장소를 보관archive하기로 결정했습니다. 이 프로젝트는 제 가장 큰 사이드 프로젝트 중 하나였으며, 받은 모든 지원에 깊이 감사드립니다. 그러나 유지보수가 점점 어려워졌고 스팸 PR 처리를 도와준 @0n1cOn3님께 특별 감사, 더 이상 기여할 여유가 없습니다. 저장소는 GitHub 및 PyPI를 통해 계속 사용할 수 있지만, 새로운 기능을 추가하거나...

PT-2026-99059

Name of the Vulnerable Software and Affected Versions X-SpringBoot versions prior to 6.0 Description The software exposes appKey and appSecret credentials via the 'GET /application/manager/select' endpoint. This occurs because the endpoint lacks authentication and field filtering, allowing...

CVE-2026-100192: Missing Authentication for Critical Function

X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field filtering. Unauthenticated attackers can retrieve these credentials and use them to send arbitrary SMS messages through any tenant's SMS provider,...

Shanghai Zhongyun Digital Win Cloud Computing Technology Co., Ltd Shanghai Old Cadre APP has Logic Flaw Vulnerability

Shanghai Old Cadre app is a senior activity software specially created for some party members and old cadres in Shanghai. Shanghai Zhongyun Digital Win Cloud Computing Technology Co. Shanghai Old Cadre App has a logic flaw vulnerability that can be exploited by attackers to cause SMS bombing...

Caixin Media Limited Caixin App has SMS Bombing Vulnerability

Caixin APP is the must-read financial information client of Caixin Media, providing users with comprehensive, in-depth, instant and accurate financial news and information information. Caixin APP of Caixin Media Co., Ltd. suffers from SMS bombing vulnerability, the vulnerability stems from the...

Shanghai Pu Ding Culture Communication Co.

Tiger Tour is a self-guided tour service platform founded and operated by Shanghai Purding Culture Communication Co. Ltd. Tiger Tours APP has an SMS bombing vulnerability, the vulnerability stems from the failure of the server side to limit the number of times and time of CAPTCHA requests for the...

Guangzhou Travel Ease App has SMS Bombing Vulnerability

Guangzhou Travel Easy APP is an information service and online business processing software launched to the public by Guangzhou Public Security Traffic Management Department. There is an SMS bombing vulnerability in Guangzhou Easy Travel APP. An attacker can exploit this vulnerability to replay...

Multiple Vulnerabilities in Android App for US LinkSys Routers

Linksys Smart Wi-Fi Routers are smart Wi-Fi routers. An arbitrary user registration, information disclosure, and SMS bombing vulnerability exists in the US LinkSys Routers Android APP. Attackers use the vulnerability to register any email address and can send unlimited reset password emails,...

Used Car Home App Has SMS Bombing Vulnerability

Used Car Home App is a mobile application platform that helps users to buy and sell used cars. The Used Car House APP version 6.1.4 suffers from an SMS bombing vulnerability that allows an attacker to traverse a cell phone number and consume server resources and cause a denial of service by sendi...

MicroTalk App Has SMS Bombing Vulnerability

MicroTalk App is a calling software. MicroTalk APP has SMS bombing vulnerability. The attacker sends unlimited CAPTCHA to the cell phone by catching packets through the forget password function, consumes server resources, and carries out SMS bombing...

Vauxhall General Management Android App has SMS Bombing Vulnerability

Wojia General Manager Android APP is a home control software. There is an SMS bombing vulnerability in Wojia Total Management Android APP. Attackers can bombard the client with SMS messages by utilizing the forget password function...

Mai Dot Mall App has SMS Bombing Vulnerability

MacDot Mall APP is an online shopping software. There is a SMS bombing vulnerability in MaiDot Mall APP. The attacker consumes server resources and causes denial of service by sending unlimited CAPTCHAs to cell phones...

Speedmaster Mom and Pop App has SMS Bombing Vulnerability

Speed Maternity App is a shopping application platform for maternity and baby products. There is an SMS bombing vulnerability in the lucky draw section of the Speed Maternity and Baby APP, where an attacker can obtain a specified prize by modifying the function of the prize ID, and consume server...

Shandong government service app for Android has SMS bombing vulnerability

Shandong government service APP is a government information software created by the Shandong Government Office. The software can release the latest information of Shandong government services in time, support personalized subscription, full-text search function, to provide faster service for the...

dedsploit - Framework For Attacking Network Protocols

Framework for attacking network protocols and network exploitation. I. Introduction I don't look back anymore. I don't regret. I look forward Aiden Pearce Yes, Watch Dogs has heavily influenced us when writing this framework. This entire project brought upon a lot of the ideals from the Watch Dog...