signal-without-smartphone

Setup Signal without smartphone A Desktop application to register an account with Signal and link it with Signal Desktop, all without requiring a smartphone. This utility avoids the need of a smart phone, but still requires a way to receive SMS messages during the setup phase. Signal recently...

fake-sms

Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. Latest update : The tool no longer uses upmasked.com, as the service went down. We are using another provider which provides more phone number...

CVE-2026-120447

The software HotGo through 2.15.1 is susceptible to an authentication bypass vulnerability. An unauthenticated attacker who knows a user's mobile number can supply a custom value to the Code field at the /admin/sms/send endpoint. By pre-setting a known verification code, the attacker can then sig...

CVE-2026-120447 HotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code

HotGo 2.8.4 through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose the SMS login verification code by supplying the Code field to /admin/sms/send. Attackers who know a user's mobile number can set a known code and sign in through...

CVE-2026-120447 HotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code

HotGo 2.8.4 through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose the SMS login verification code by supplying the Code field to /admin/sms/send. Attackers who know a user's mobile number can set a known code and sign in through...

SMSBotBypass

SMSBotBypass Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API. It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system : he's gonna receive the sm...

otp-bot

SMSBotBypass Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API. It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system : he's gonna receive the sm...

CodeCatcher security vulnerability

Version 131 of CodeCatcher contains a security vulnerability stemming from improper permission settings. This vulnerability may allow unauthorized attackers to manipulate the application’s SMS verification code capture mechanism at will...

CVE-2026-84923

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0...

CVE-2026-84924

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflected XSS. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0...

CVE-2026-84923 Email Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0...

EUVD-2026-107875

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0...

CVE-2026-84923

The Drupal Email Verification / SMS Verification / OTP Verification module (versions 0.0.0 through 2.4.0 ) is vulnerable to an authentication bypass caused by insufficient validation of user-supplied input. This flaw allows an attacker to bypass the verification process during user registration, ...

CVE-2026-84923 Email Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0...

CVE-2026-84924

The Email Verification / SMS Verification / OTP Verification Drupal module (versions 0.0.0 to 2.4.0 ) is vulnerable to an unauthenticated reflected Cross-site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation, where the module fails to sufficientl...

CVE-2026-84924 Email Verification / SMS Verification / OTP Verification - Critical - Cross Site Scripting - SA-CONTRIB-2026-125

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflected XSS. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0...

EUVD-2026-107874

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflected XSS. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0...

Drupal Email Verification / SMS Verification / OTP Verification authorization issue vulnerability

Drupal Email Verification / SMS Verification / OTP Verification versions prior to 2.4.0 contain an authorization issue vulnerability. This vulnerability arises from the use of alternative paths or channels, potentially leading to authentication bypass...

Drupal Email Verification / SMS Verification / OTP Verification cross-site scripting vulnerability

Drupal Email Verification / SMS Verification / OTP Verification versions prior to 2.4.0 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to reflected cross-site scripting attacks...

Race Condition

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Race Condition due to a race condition in the login process. An attacker can obtain multiple valid session tokens by...