SMSOTPBOT

ghost-OTPBOT ghost-OTPBOT è il bot per la cattura di OTP e SMS più avanzato e versatile, in grado di ottenere codici OTP e SMS dalle vittime impersonando un'azienda o una banca. Puoi usarlo per ottenere OTP per accessi, banche, carte di credito, Apple Pay e altro. Unisciti a...

CVE-2026-63587

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

CVE-2026-63587 SMS Password Authorization Bypass via Failed Attempt Counter

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

EUVD-2026-65329

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

CVE-2026-63587

IE-SR-2TX-WL-4G devices contain a logic flaw in their SMS password authorization mechanism. When the 'Enable Password Authorization' setting is active, the device increments a retry counter on each failed password attempt. After 5 consecutive failures , SMS password authorization is automatically...

otp-bot

SMSBotBypass Bypassa le verifiche SMS di Paypal, Instagram, Snapchat, Google, 3D Secure e molti altri... usando un Discord Bot o l'API privata. È davvero semplice. Immagina che il tuo amico abbia un account Snapchat, provi a reimpostare la sua password usando il sistema SMS : riceverà il codice d...

cve-2015-3839_PoC

cve-2015-3839PoC PoC von cve-2015-3839, welches die SMS-App von Android zum Absturz bringen kann DoS Es funktionierte gut auf meinen Testgeräten Nexus 5 Android 4.4.4 und Nexus 5 Android 5.0.1...

TeleGram-Scraper

Scraper per gruppi Telegram • Configurazione API Vai su http://my.telegram.org e accedi. Clicca su API development tools e compila i campi richiesti. Inserisci il nome dell'app che preferisci e seleziona 'other' nella piattaforma. Esempio: Copia "apiid" e "apihash" dopo aver cliccato su crea app...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation root@kitploit: First Download or...

TBomb

TBomb v2.1b Eine kostenlose und quelloffene SMS/Anruf-Bombing-Anwendung Ankündigung Wichtiger Hinweis: Aufgrund einer Kombination aus minderwertigen Beiträgen, Spam-Pull-Requests/Issues und meiner Hinwendung zu neuen Projekten habe ich beschlossen, dieses Repository zu archivieren. Dieses Projekt...

Your polite reply to that text is worth $2 on the dark web

Most wrong-number texts are harmless. Some are the first step in a carefully planned scam. By replying, you may be confirming that your number is active and that you're willing to engage with strangers, making you a more valuable target for future fraud. Here's why a polite response can be worth...

CVE-2026-66424

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

CVE-2026-66424 WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

CVE-2026-66424

CVE-2026-66424 affects the WordPress plugin SMS Alert Order Notifications (versions

EUVD-2026-57860

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

CVE-2026-66424

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

Dissecting the JWR phishing framework

Cisco Talos recently identified an undocumented phishing framework, internally branded "JWR" by its developer, built to convincingly impersonate checkout and login pages across major payment and shopping platforms. The client engine of the JWR phishing framework is a real-time, operator-driven...

CVE-2026-71950 D-Link DWR-M961 Command Injection via /boafrm/formSmsManage

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker can inject arbitrary malicious commands into the actionvalue field, resulting in command execution...

WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Aydan Arabadzha in WordPress Plugin SMS Alert Order Notifications versions = 3.9.7...

CVE-2026-15206

CVE-2026-15206 affects the SMS Alert WordPress plugin (before 3.9.8). The vulnerability arises because the plugin does not bind the mobile verified session flag to the actually verified phone number. After an attacker verifies an OTP on their own number, the signup/login handler reads an attacker...