RuMMS: The Latest Family of Android Malware Attacking Users in Russia Via SMS Phishing

Introduction Recently we observed an Android malware family being used to attack users in Russia. The malware samples were mainly distributed through a series of malicious subdomains registered under a legitimate domain belonging to a well-known shared hosting service provider in Russia. Because...

RuMMS: The Latest Family of Android Malware Attacking Users in Russia Via SMS Phishing

Introduction Recently we observed an Android malware family being used to attack users in Russia. The malware samples were mainly distributed through a series of malicious subdomains registered under a legitimate domain belonging to a well-known shared hosting service provider in Russia. Because...

vodafone.sms.cz XSS vulnerability

Vulnerable URL: http://vodafone.sms.cz/index.php?Pidkategorie=7630soubor=student%2Findex.php%3Fakce%3Dhledej%26akceHledej%3D1%26hlKde1%3D1%26studweb%3D0%26hlText%3D%2527%2522%253E%25%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest che...

WordPress Persian Woocommerce SMS 3.3.2 XSS

FULL DISCLOSURE Product :Persian-woocommerce-sms Exploit Author : Rahul Pratap Singh Version :3.3.2 Home page Link : https://wordpress.org/plugins/persian-woocommerce-sms/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 21/4/2016 XSS Vulnerabilit...

Persian Woocommerce SMS <= 3.3.3 - Reflected Cross-Site Scripting (XSS)

The افزونه پیامک ووکامرس Persian WooCommerce SMS WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Persian Woocommerce SMS Plugin <= 3.3.3 - Cross Site Scripting (XSS)

This plugin is prone to a cross site scripting vulnerability, because "pssmsnumbers" parameter is not sanitized. Solution Update the plugin...

Tollgrade Smart Grid EMS LightHouse Vulnerabilities

OVERVIEW Ashish Kamble of Qualys, Inc. has identified vulnerabilities in Tollgrade Communications, Inc.’s Smart Grid LightHouse Sensor Management System SMS Software EMS. Tollgrade has produced a new version to mitigate these vulnerabilities. Ashish Kamble has tested the new version to validate...

app.eva-sms.com XSS vulnerability

Vulnerable URL: http://app.eva-sms.com/claroline/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=MMK21516 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Fake Call and Fake SMS - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fake Call and Fake SMS published at the 'play' market has multiple vulnerabilities...

GPS Tracker Car TK SMS Free - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application GPS Tracker Car TK SMS Free published at the 'play' market has multiple vulnerabilities...

SMS Backup & Restore - Exported components, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application SMS Backup & Restore published at the 'play' market has multiple vulnerabilities...

FREE-GO SMS NEW YEAR EVE THEME - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application FREE-GO SMS NEW YEAR EVE THEME published at the 'play' market has multiple vulnerabilities...

(FREE) GO SMS SIMPLE THEME - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application FREE GO SMS SIMPLE THEME published at the 'play' market has multiple vulnerabilities...

Funny SMS Ringtones - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Funny SMS Ringtones published at the 'play' market has multiple vulnerabilities...

Way2 ( Way2SMS Free SMS ) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Way2 Way2SMS Free SMS published at the 'play' market has multiple vulnerabilities...

SMS Ringtones Pro - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SMS Ringtones Pro published at the 'play' market has multiple vulnerabilities...

SMS Ringtones - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SMS Ringtones published at the 'play' market has multiple vulnerabilities...

Funny SMS Ringtones & Sounds - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Funny SMS Ringtones & Sounds published at the 'play' market has multiple vulnerabilities...

SMS Recovery DEMO - Possible privilege escalation, Runtime command execution, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application SMS Recovery DEMO published at the 'play' market has multiple vulnerabilities...

SMS+Car offline Voice Control - Customized SSL, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application SMS+Car offline Voice Control published at the 'play' market has multiple vulnerabilities...