Arbitrary code execution vulnerability in Finecms backend controllers\admin\Sms.php page

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. An arbitrary code execution vulnerability exists in the Finecms backend controllers\admin\Sms.php page. Since the array2string function does not filter the submitted data, allowing attackers to...

Hackers Using Fake Cellphone Towers to Spread Android Banking Trojan

Chinese Hackers have taken Smishing attack to the next level, using rogue cell phone towers to distribute Android banking malware via spoofed SMS messages. SMiShing — phishing attacks sent via SMS — is a type of attack wherein fraudsters use number spoofing attack to send convincing bogus message...

SMS Client

This module sends a text message to multiple phones of the same carrier. You can use it to send a malicious link to phones. Please note that you do not use this module to send a media file attachment. In order to send a media file, please use auxiliary/client/mms/sendmms instead. This module...

QIWI: [wallet.rapida.ru] Mass SMS flood

... или сказ о том, как я опрометчиво заказал себе рассылку из 300 смс. Шаги для воспроизведения: 1 Логинимся в wallet.rapida.ru 2 Идём в шаблоны и создаём себе шаблон для оплаты мобилы 3 Если вы до этого нигде не вводили 2FA код - то сейчас самая фишка - нас просят его ввести. 4 Ловим запрос и...

Pushbullet - SMS on PC - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Pushbullet - SMS on PC published at the 'play' market has multiple vulnerabilities...

Yappy - SMS on PC & Tablet - Dangerous filesystem permissions, Hardcoded secrets, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Yappy - SMS on PC & Tablet published at the 'play' market has multiple vulnerabilities...

SMS Text Messaging -PC Texting - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application SMS Text Messaging -PC Texting published at the 'play' market has multiple vulnerabilities...

Octane SMS and MMS Transfer - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Octane SMS and MMS Transfer published at the 'play' market has multiple vulnerabilities...

inChat plus SMS - Apache license, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application inChat plus SMS published at the 'play' market has multiple vulnerabilities...

SMS MMS Messenger - ContentProvider mode not defined, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application SMS MMS Messenger published at the 'play' market has multiple vulnerabilities...

SMS Messaging (AOSP) - Exported ContentProvider, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application SMS Messaging AOSP published at the 'play' market has multiple vulnerabilities...

SMS MMS Search for Tasker - Exported components, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application SMS MMS Search for Tasker published at the 'play' market has multiple vulnerabilities...

Schedule SMS MMS EMAIL - Base64 encoded String, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Schedule SMS MMS EMAIL published at the 'play' market has multiple vulnerabilities...

PhoneLeash: SMS/MMS forwarding - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PhoneLeash: SMS/MMS forwarding published at the 'play' market has multiple vulnerabilities...

GO SMS Pro - Dangerous filesystem permissions, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application GO SMS Pro published at the 'play' market has multiple vulnerabilities...

Handcent Next SMS - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Handcent Next SMS published at the 'play' market has multiple vulnerabilities...

Khan Academy: No Security check at changing password and at adding mobile number which leads to account takeover and spam

Description I have noticed that there is no security check at changing password. If someone gets a logged in account for 5 seconds, they are extremely likely to change the password of the account with the knowledge of the victim. also, while adding a mobile number / changing a mobile number, ther...

Messages + SMS - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Messages + SMS published at the 'play' market has multiple vulnerabilities...

Voice SMS(MSS) - voice2voice - SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Voice SMSMSS - voice2voice published at the 'play' market has multiple vulnerabilities...

SMS+ (with Lock, Emoji, Spam) - Customized SSL, Hardcoded secrets, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SMS+ with Lock, Emoji, Spam published at the 'play' market has multiple vulnerabilities...