How to Send Messages That Automatically Disappear

Need to be discreet? Here's how to set up vanishing texts, photos, or videos in most popular chat apps...

CVE-2020-9148

An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to delete user SMS messages...

DynPG 4.9.1 Cross Site Scripting

Exploit Title: DynPG 4.9.1 - Persistent Cross-Site Scripting Authenticated Date: 2020-10-09 Exploit Author: Enes Özeser Vendor Homepage: https://dynpg.org/ Version: 4.9.1 Tested on: Windows & XAMPP == Tutorial alert"XSS"; == HTTP Request alert"XSS";...

Free Apple iPhone 12? Chatbot Phish Spreads Via Texts

A mobile phishing campaign is spreading via text messages purporting to come from an Apple chatbot – and offering “free trials” of iPhone 12. The iPhone 12 is due to be released in October, and the buzz is high for Appleheads who are anxiously awaiting the launch. Cybercriminals are taking...

CVE-2017-18668

An issue was discovered on Samsung mobile devices with M6.0 software. Attackers can prevent users from making outbound calls and sending outbound text messages. The Samsung ID is SVE-2017-8706 June 2017...

Code injection

An issue was discovered on Samsung mobile devices with M6.0 software. Attackers can prevent users from making outbound calls and sending outbound text messages. The Samsung ID is SVE-2017-8706 June 2017...

Faketoken malware sends expensive & offensive texts at your expense

By Sudais Another day, another Android malware.! This time, Faketoken malware has made a comeback and here's what it does... This is a post from HackRead.com Read the original post: Faketoken malware sends expensive & offensive texts at your expense...

Code injection

Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission...

CVE-2013-4764

CVE-2013-4764 describes a vulnerability in Samsung Galaxy S3/S4 where a built-in component (sCloudBackupProvider.apk) exposes unprotected components that an unprivileged app can abuse to send arbitrary SMS texts to arbitrary destinations without permission. The root cause involves triggering a se...

Why Many People Got Mysterious Valentine’s Day Texts Today

The issue was reportedly caused by a maintenance update made to “messaging platforms of multiple carriers in the US."...

Android Keyboard App Could Swindle 40M Users Out of Millions

Researchers are warning users to delete a popular Android keyboard app that, once downloaded, makes unauthorized purchases of premium digital content. Google told Threatpost it has removed the app from its Google Play marketplace – but researchers say it was downloaded on at least 40 million phon...

ViceLeaker Android malware steals call recordings, photos, videos & texts

By Waqas Israeli Citizens are the Primary Target of New Android Mobile Spying Campaign Using ViceLeaker Malware, says Kaspersky. Kaspersky Lab researchers discovered an Android malware campaign active since 2016 and still going strong. Dubbed ViceLeaker; researchers claim that it is the product o...

Learning With Texts 1.6.2 SQL Injection

Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version: 1.6.2 Category: Webapps Tested on:...

Learning with Texts 1.6.2 - start SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version: 1.6.2 Category: Webap...

Learning with Texts 1.6.2 - 'start' SQL Injection

Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version: 1.6.2 Category: Webapps Tested on:...

Learning with Texts 1.6.2 - start SQL Injection

Learning with Texts 1.6.2 - start SQL Injection Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version:...

CVE-2018-5548

On BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for origuri parameter in an undisclosed /vdesk link of APM virtual server configured with an access profile, allowing a malicious user to build a redirect URI value using different blocks of cipher texts...

Fake Beto O'Rourke Texts Expose New Playground for Trolls

Someone hijacked a volunteer tool to make it look like Beto O'Rourke encouraged voter fraud—and that could just be the beginning...

Huawei Mate 9 Pro Cell Phone Short Message Module Denial of Service Vulnerability

The Huawei Mate 9 Pro is a smartphone product of the Chinese company Huawei Huawei. A denial of service vulnerability exists in the SMS module of the Huawei Mate 9 Pro. An unauthenticated attacker could set up a pseudo-base station and send certain malicious short messages to a cell phone that...

CVE-2017-14595

In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...