CVE-2018-6312

The CVE-2018-6312 entry concerns Foxconn FEMTO AP-FC4064-T (AP_GT_B38_5.8.3lb15-W47 LTE Build 15). A privileged account with a weak default password enables turning on TELNET via the web interface, allowing root login without a password and full system compromise with access to user communication...

CVE-2018-6311: Undefined Security Weakness

One can gain root access on the Foxconn femtocell FEMTO AP-FC4064-T version APGTB385.8.3lb15-W47 LTE Build 15 via UART pins without any restrictions, which leads to full system compromise and disclosure of user communications...

CVE-2018-6312: Weak Password Requirements

A privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T version APGTB385.8.3lb15-W47 LTE Build 15 can be used to turn on the TELNET service via the web interface, which allows root login without any password. This vulnerability will lead to full system...

t-mobile.pl XSS vulnerability

Open Bug Bounty ID: OBB-572260 Description| Value ---|--- Affected Website:| t-mobile.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

t-web.fr XSS vulnerability

Open Bug Bounty ID: OBB-570832 Description| Value ---|--- Affected Website:| t-web.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Teen Exposes T-Mobile Flaw Allowing Mass Hijacking of User Accounts

By Waqas Users of popular cell phone carrier T-Mobile could have been This is a post from HackRead.com Read the original post: Teen Exposes T-Mobile Flaw Allowing Mass Hijacking of User Accounts...

t-a-o.com XSS vulnerability

Open Bug Bounty ID: OBB-567612 Description| Value ---|--- Affected Website:| t-a-o.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Supporters of Net Neutrality Vow to Fight Rule Changes

The repeal of network neutrality rules inched closer to reality on Thursday when the Federal Communications Commission submitted into the Federal Registry its controversial replacement called the Restoring Internet Freedom order. Opponents say the new order will create powerful internet gatekeepe...

t-shirt.ffa.vutbr.cz XSS vulnerability

Open Bug Bounty ID: OBB-556069 Description| Value ---|--- Affected Website:| t-shirt.ffa.vutbr.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sportdaten.t-online.de XSS vulnerability

Open Bug Bounty ID: OBB-551072 Description| Value ---|--- Affected Website:| sportdaten.t-online.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

t-shirt-ya.com XSS vulnerability

Open Bug Bounty ID: OBB-544499 Description| Value ---|--- Affected Website:| t-shirt-ya.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-5705: Improper Neutralization of Input During Web Page Generation

Reservo Image Hosting 1.6 is vulnerable to XSS attacks. The affected function is its search engine the t parameter to the /search URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admins. By sending users an infected URL, code will ...

t-shirtskempen.be XSS vulnerability

Open Bug Bounty ID: OBB-511950 Description| Value ---|--- Affected Website:| t-shirtskempen.be Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

U.K. Man Avoids Jail Time in vDOS Case

A U.K. man who pleaded guilty to launching more than 2,000 cyberattacks against some of the world's largest companies has avoided jail time for his role in the attacks. The judge in the case reportedly was moved by pleas for leniency that cited the man's youth at the time of the attacks and a...

t-herbals.fr XSS vulnerability

Open Bug Bounty ID: OBB-455541 Description| Value ---|--- Affected Website:| t-herbals.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

A week in security (December 11 – December 17)

Last week we explained what fast flux is and how it's being abused, we showed you all kinds of Bitcoin-related scams, presented a video recording of a tech support scammer trying to sell free software, and pointed out some free software to keep an eye on your Internet traffic. We also informed yo...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

The vulnerability of the OxygenOS operating system in OnePlus 3 and 3T devices allows attackers to gain elevated privileges and expose sensitive information.

The vulnerability of the OxygenOS operating system in OnePlus 3 and 3T devices is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain root privileges and disclose sensitive information by replacing the device’s system...

The vulnerability of the OxygenOS operating system on OnePlus 3 and 3T devices, which allows a hacker to gain increased privileges

The vulnerability of the OxygenOS operating system in OnePlus 3 and 3T devices is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain root privileges and block notifications regarding the replacement of the system partition by using the...

VMware Cloud on AWS - Support, Considerations, and Limitations

Challenge VMware Cloud on AWS is an integrated cloud offering developed by AWS and VMware. It requires specific preparation to enable Veeam Backup & Replication to function with it. Apart from the preparation process and the limitations mentioned at the end of this article, you can interact with...