SMS & Call Log Backup - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application SMS & Call Log Backup published at the 'play' market has multiple vulnerabilities...

The Latest Android Overlay Malware Spreading via SMS Phishing in Europe

Introduction In April 2016, while investigating a Smishing campaign dubbed RuMMS that involved the targeting of Android users in Russia, we also noticed three similar Smishing campaigns reportedly spreading in Denmark February 2016, in Italy February 2016, and in both Denmark and Italy April 2016...

SG8000 large rotating machine monitoring system Alarm SMS module /sg8k_sms information disclosure

No description provided by source...

Uber: Uber is Flooding my Mobile with SMS Daily like a cron JOB

The Issue is with the design of sending SMS by the uber referrals system, and every day it's flodding my phone number with driver invitaion message To reproduce this scenario i have Fuzz the below request Through OWSAP Zap I fuzzed for 10,000 requests , keep the same Phone number I have used my...

Banking Trojan Outwits Google Play Malware Scanner

Google Play’s first line of defense against malware was circumvented by attackers who managed to sneak a malicious app called “Black Jack Free” into the official app store. The app was discovered by Lookout Security and removed by Google last week. Lookout estimates that 5,000 people downloaded t...

Old Android Flaw Elevates Privileges, Steals SMS, Call Logs

A five-year-old Android vulnerability disclosed today affects hundreds of different device models going back to Jelly Bean 4.3. Older devices are at the greatest risk; newer devices running Android with SE Android, the OS’ implementation of Security Enhanced Linux, are at a lesser risk. The...

Exploiting CVE-2016-2060 on Qualcomm Devices

Mandiant’s Red Team recently discovered a widespread vulnerability affecting Android devices that permits local privilege escalation to the built-in user “radio”, making it so an attacker can potentially perform activities such as viewing the victim’s SMS database and phone history. The...

SQL Injection Vulnerability in Enterprise Messenger Operational SMS Platforms

Enterprise Messenger Operational SMS platform is a set of SMS operation system. The product suffers from an SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

RuMMS: The Latest Family of Android Malware Attacking Users in Russia Via SMS Phishing

Introduction Recently we observed an Android malware family being used to attack users in Russia. The malware samples were mainly distributed through a series of malicious subdomains registered under a legitimate domain belonging to a well-known shared hosting service provider in Russia. Because...

RuMMS: The Latest Family of Android Malware Attacking Users in Russia Via SMS Phishing

Introduction Recently we observed an Android malware family being used to attack users in Russia. The malware samples were mainly distributed through a series of malicious subdomains registered under a legitimate domain belonging to a well-known shared hosting service provider in Russia. Because...

vodafone.sms.cz XSS vulnerability

Vulnerable URL: http://vodafone.sms.cz/index.php?Pidkategorie=7630soubor=student%2Findex.php%3Fakce%3Dhledej%26akceHledej%3D1%26hlKde1%3D1%26studweb%3D0%26hlText%3D%2527%2522%253E%25%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest che...

WordPress Persian Woocommerce SMS 3.3.2 XSS

FULL DISCLOSURE Product :Persian-woocommerce-sms Exploit Author : Rahul Pratap Singh Version :3.3.2 Home page Link : https://wordpress.org/plugins/persian-woocommerce-sms/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 21/4/2016 XSS Vulnerabilit...

Persian Woocommerce SMS <= 3.3.3 - Reflected Cross-Site Scripting (XSS)

The افزونه پیامک ووکامرس Persian WooCommerce SMS WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Persian Woocommerce SMS Plugin <= 3.3.3 - Cross Site Scripting (XSS)

This plugin is prone to a cross site scripting vulnerability, because "pssmsnumbers" parameter is not sanitized. Solution Update the plugin...

Tollgrade Smart Grid EMS LightHouse Vulnerabilities

OVERVIEW Ashish Kamble of Qualys, Inc. has identified vulnerabilities in Tollgrade Communications, Inc.’s Smart Grid LightHouse Sensor Management System SMS Software EMS. Tollgrade has produced a new version to mitigate these vulnerabilities. Ashish Kamble has tested the new version to validate...

app.eva-sms.com XSS vulnerability

Vulnerable URL: http://app.eva-sms.com/claroline/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=MMK21516 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Fake Call and Fake SMS - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fake Call and Fake SMS published at the 'play' market has multiple vulnerabilities...

GPS Tracker Car TK SMS Free - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application GPS Tracker Car TK SMS Free published at the 'play' market has multiple vulnerabilities...

SMS Backup & Restore - Exported components, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application SMS Backup & Restore published at the 'play' market has multiple vulnerabilities...

FREE-GO SMS NEW YEAR EVE THEME - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application FREE-GO SMS NEW YEAR EVE THEME published at the 'play' market has multiple vulnerabilities...