Cool SMS - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Cool SMS published at the 'play' market has multiple vulnerabilities...

Truemessenger - SMS Block Spam - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Truemessenger - SMS Block Spam published at the 'play' market has multiple vulnerabilities...

chomp SMS - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application chomp SMS published at the 'play' market has multiple vulnerabilities...

SMS Theme - ContentProvider mode not defined, Dynamic Code Loading, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application SMS Theme published at the 'play' market has multiple vulnerabilities...

Fome SMS Portal 2.0 - SQL Injection

Fome SMS Portal 2.0 - SQL Injection Exploit Title: Fome SMS Portal Advanced - Bulk SMS Reseller v2.0 Script - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://ynetinteractive.com/ Software Buy:...

Sendroid 5.2 - SQL Injection

Exploit Title: Sendroid - Bulk SMS Portal, Marketing v5.2 Script - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://ynetinteractive.com/ Software Buy: https://codecanyon.net/item/sendroid-bulk-sms-portal-marketing-2way-messaging-script-with-mobile-app/14657225 Demo:...

Fome SMS Portal 2.0 - SQL Injection

Exploit Title: Fome SMS Portal Advanced - Bulk SMS Reseller v2.0 Script - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://ynetinteractive.com/ Software Buy: https://codecanyon.net/item/fome-sms-portal-advanced-bulk-sms-reseller-script/14241587 Demo:...

Fome SMS Portal 2.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Fome SMS Portal Advanced - Bulk SMS Reseller v2.0 Script - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://ynetinteractive.com/ Software Buy:...

Fome SMS Portal 2.0 SQL Injection

Exploit Title: Fome SMS Portal Advanced - Bulk SMS Reseller v2.0 Script - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://ynetinteractive.com/ Software Buy: https://codecanyon.net/item/fome-sms-portal-advanced-bulk-sms-reseller-script/14241587 Demo:...

Sendroid 5.2 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Sendroid - Bulk SMS Portal, Marketing v5.2 Script - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://ynetinteractive.com/ Software Buy:...

TalariaX SendQuick Entera and Avera Device Authentication Bypass Vulnerability

TalariaX SendQuick Entera and Avera are both products of TalariaX Singapore. The former is a web-based server management system and the latter is a plug-and-play network monitoring system. A security vulnerability exists in versions of TalariaX SendQuick Entera and Avera devices prior to 2HF16. A...

Cross site request forgery (csrf)

An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective...

CVE-2017-5137

An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective...

CVE-2017-5137

An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective...

CVE-2017-5137

CVE-2017-5137 affects TalariaX SendQuick Entera and Avera devices prior to version 2HF16. Multiple sources (NVD, CNVD, PT-Security) describe an unauthenticated attacker being able to request and download SMS logs without credentials, indicating an authentication bypass in the SMS-logs access path...

PT-2017-16334 · Sendquick +1 · Sendquick Entera +1

Name of the Vulnerable Software and Affected Versions: SendQuick Entera versions prior to 2HF16 Avera versions prior to 2HF16 Description: An issue allows an attacker to request and download SMS logs without authentication. Recommendations: For SendQuick Entera versions prior to 2HF16, update to...

Charger Mobile Ransomware Removed from Google Play

Security researchers have identified a new and evasive mobile ransomware strain called Charger on the Google Play app store. The Charger malware was bundled with an SMS-snooping app called EnergyRescue that pawned itself off as a battery management utility, according to Check Point security...

Source Code for another Android Banking Malware Leaked

Another bad news for Android users — Source code for another Android banking malware has been leaked online via an underground hacking forum. This newly discovered banking Trojan is designed to steal money from bank accounts of Android devices' owners by gaining administrator privileges on their...

Uber: SMS URL verification link does not expire on phone number change and lacks rate limiting

When verifying your phone number attached to your Uber account, it was possible to re-use an old verification URL to validate a new cell phone number. In addition to this, there was no rate limiting on the SMS verification which allowed for it to be easily brute-forced. The internal team resolved...

Huawei Flybox B660 Cross Site Request Forgery

Document Title: =============== Huawei Flybox B660 - POST SMS CSRF Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2026 Release Date: ============= 2017-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 2026...