109 matches found
AndroRAT
AndroRAT Android용 원격 관리 도구 Androrat는 클라이언트/서버 애플리케이션으로, 클라이언트 측은 Java Android로, 서버는 Java/Swing으로 개발되었습니다. 이름 Androrat는 Android와 RATRemote Access Tool의 혼합어입니다. 4명의 팀이 대학 프로젝트를 위해 개발했으며, 한 달 만에 완성되었습니다. 이 애플리케이션의 목표는 Android 시스템을 원격으로 제어하고 시스템에서 정보를 수집하는 것입니다. 기술 사항 Android 애플리케이션은 모든 연결을 수신하는 서버의...
traccar
Traccar 개요 Traccar는 오픈 소스 GPS 추적 시스템입니다. 이 저장소에는 Java 기반 백엔드 서비스가 포함되어 있습니다. 200개 이상의 GPS 프로토콜과 2000개 이상의 GPS 추적 장치 모델을 지원합니다. Traccar는 모든 주요 SQL 데이터베이스 시스템과 함께 사용할 수 있습니다. 또한 사용하기 쉬운 REST API를 제공합니다. Traccar 솔루션의 다른 구성 요소는 다음과 같습니다: Traccar 웹 앱 Traccar Manager 앱 모바일 장치 추적에 사용할 수 있는 모바일 앱 세트도 있습니...
airo-heat
airoheat Repository of the T1GR3$ team at the Cybercamp 2018 hackathon Final presentation at Cybercamp 2018: https://www.youtube.com/watch?v=l-iBtYxHAbQ Video used at Cybercamp 2018: https://www.youtube.com/watch?v=0DEitQNn7GQ Aircrack-ng Installation modification sudo apt-get install...
CamPhish
CamPhish Grab cam shots from target's phone front camera or PC webcam just sending a link. What is CamPhish? CamPhish is techniques to take cam shots of target's phone front camera or PC webcam. CamPhish Hosts a fake website on in built PHP server and uses ngrok & CloudFlare Tunnel to generate a...
CVE-2024-24809-Proof-of-concept
CVE-2024-24809 상세 설명 Traccar는 오픈 소스 GPS 추적 시스템입니다. 6.0 이전 버전은 경로 탐색 및 위험한 유형의 파일 무제한 업로드에 취약합니다. 시스템이 기본적으로 등록을 허용하므로 공격자는 계정을 등록하여 일반 사용자 권한을 획득하고 이 취약점을 악용하여 device. 접두사가 붙은 파일을 임의 폴더에 업로드할 수 있습니다. 공격자는 이 취약점을 피싱, 크로스 사이트 스크립팅 공격에 사용할 수 있으며 잠재적으로 서버에서 임의 명령을 실행할 수 있습니다. 버전 6.0에는 이 문제에 대한 패치가 포함...
Traccar - Unrestricted File Upload
Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by registering an account and exploit this...
CVE-2026-52851 Traccar: Authenticated Blind SQL Injection in DELETE /api/permissions
Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated, non-readonly user with access to an object usable in a permission pair can submit DELETE /api/permissions with an extra attacker-controlled JSON key. PermissionLinkedHashMap in...
CVE-2026-48235: Improper Neutralization of Special Elements used in an SQL Command
Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in incs/remotes.inc.php where latitude, longitude, callsign, mph, altitude, and timestamp values parsed from external GPS tracking service XML/JSON responses InstaMapper and Google Latitude integration are concatenated into...
EUVD-2018-21645
GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...
CVE-2018-25192
GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...
CVE-2018-25192
GPS Tracking System 2.12 is vulnerable to SQL injection via the username parameter in login.php, allowing unauthenticated bypass of authentication. The underlying issue is a SQL injection in the login flow, enabling attackers to gain unauthorized access without valid credentials. Reported impact ...
CVE-2018-25192 GPS Tracking System 2.12 SQL Injection via username Parameter
GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...
CVE-2018-25192 GPS Tracking System 2.12 SQL Injection via username Parameter
GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...
CVE-2018-25192: Improper Neutralization of Special Elements used in an SQL Command
GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...
PT-2026-23702
GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...
New ZeroDayRAT Mobile Spyware Enables Real-Time Surveillance and Data Theft
Cybersecurity researchers have disclosed details of a new mobile spyware platform dubbed ZeroDayRAT that's being advertised on Telegram as a way to grab sensitive data and facilitate real-time surveillance on Android and iOS devices. "The developer runs dedicated channels for sales, customer...
EUVD-2020-26460
Malware in sbrugna...
EUVD-2021-8656
Malicious code in bioql PyPI...