Command Execution Vulnerability in TASKID[0] Parameter of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. A command execution vulnerability exists in the TASKID0 parameter of the Tibco Call Center System. The vulnerability file is: /recordings/userwebstd/auto/outBound.php which...

Arbitrary File Download Vulnerability in ShowDownloadFile Function of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. An arbitrary file download vulnerability exists in the showDownloadFile function of the ITS Call Center System. The vulnerability file is:...

Command Execution Vulnerability in Call Center System Year Parameter of Tibus Communications

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. A command execution vulnerability exists in the year parameter of the Setset Time Communication Call Center System. The vulnerability file: /sysmaint/settime.php allows...

Command Execution Vulnerability in the tskid Parameter of Tibco's Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. A command execution vulnerability exists in the tskid parameter of the Tibco Call Center System. The vulnerability files: /recordings/userwebstd/auto/aob/pkill.php and...

File upload vulnerability in the file /userweb/php/index/daPing.class.php of the Tibus Communications call center system

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. A file upload vulnerability exists in the file /userweb/php/index/daPing.class.php in the Tibco Call Center System. The vulnerability allows an attacker to upload a webshell a...

Arbitrary File Download Vulnerability in ShowDownload Function of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. An arbitrary file download vulnerability exists in the showDownload function of the Tibco Call Center System. The vulnerability file is: /userweb/php/index/log.class.php, whic...

SQL Injection Vulnerability in WiseGuy's Call Center

Ltd. is the field of call center outsourcing and custom development of call center system software in various industries, providing customers with call center seat outsourcing, system customization and development and other forms of call center, e-commerce and other BPO process service outsourcin...

Arbitrary Command Execution Vulnerability in the Call Center of Shenzhen Jishi Communication Co.

The call center of Shenzhen Jishu Communication Co., Ltd. is a new generation of enterprise-level call center system. An arbitrary command execution vulnerability exists in the call center of Shenzhen JTS Communications Co. By constructing the $POST parameter without any filtering measures, it...

Arbitrary File Read Vulnerability in the Call Center of Shenzhen Jishu Communication Co.

The call center of Shenzhen Jishu Communication Co., Ltd. is a new generation of enterprise-level call center system. An arbitrary file read vulnerability exists in the call center of Shenzhen JTS Communications Co. Due to poor filtering of sysmaint/config/fileedit.php and...

Arbitrary File Download and Backdoor Vulnerability in Call Center System of Shenzhen Jishu Communication Co.

Ltd. The kernel of the call center system is the communication-based enterprise internal and external communication and liaison system, and the core part is the switching system PBX Private Branch Exchange. There are arbitrary file downloads and backdoor vulnerabilities in the call center system ...

Home Depot Breach Cost Company $43 Million in Third Quarter

The massive Home Depot data breach disclosed earlier this fall involved the theft of 56 million credit and debit card numbers, and now the company has revealed that the incident so far has cost it $43 million. The costs are the result of both the investigation into the data breach as well as the...

FTC Shutters $120 Million Tech Support, Bogus Software Scam

Earlier this week a federal court in Florida issued a temporary restraining order shutting down a series of organizations in the business of peddling fake software and nonexistent tech support services, temporarily freezing the assets of those companies’ and placing them under the control of a...

Call Center Phone Fraud for Fun at Profit at Black Hat

Reconnaissance in the context of targeted attacks usually involves scouring freely available online resources such as social media and developer forums. Personal information willfully posted to these sites are clues a hacker can use to build a profile on a target, map systems and network...

Yahoo! Messenger 5.0 Call Center Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4837/info Yahoo! Messenger configures the 'ymsgr:' URI handler when it is installed. The handler invokes YPAGER.EXE with the supplied parameters. YPAGER.EXE accepts the 'call' argument; it is used for starting the 'Call...

Phishing Email Exposes Patient Data of 90,000

After opening a malicious attachment in a phishing email, an employee at University of Washington Medicine in Seattle may have exposed the personal information of more than 90,000 Harborview Medical Center and University of Washington Medical Center patients. The breach took place in October...

Voice Logger astTECS - bypass login & arbitrary file download

Author: Michal Blaszczak Website: http://blaszczakm.blogspot.com Project: hack voip - http://blaszczakm.blogspot.com/search/label/hack20voip Date: 16.07.2013 Voice Logger - VoIP software for Call Center 1 bypass login login: admin' or 1='1 password: admin line: 168 file: managerlogin.server.php 2...

Voice Logger SQL Injection / File Download Vulnerabilities

Voice Logger suffers from a remote SQL injection vulnerability that allows for authentication bypass as well as an arbitrary file download vulnerability. Author: Michal Blaszczak Website: http://blaszczakm.blogspot.com Project: hack voip - http://blaszczakm.blogspot.com/search/label/hack%20voip...

Voice Logger SQL Injection / File Download

Author: Michal Blaszczak Website: http://blaszczakm.blogspot.com Project: hack voip - http://blaszczakm.blogspot.com/search/label/hack%20voip Date: 16.07.2013 Voice Logger - VoIP software for Call Center 1 bypass login login: admin' or 1='1 password: admin line: 168 file: managerlogin.server.php ...

Code injection

Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components...

CVE-2013-2399

CVE-2013-2399 affects Oracle Siebel CRM 8.1.1/8.2.2, specifically the Siebel Call Center component (Email - COMM Server Components). The Nessus entry notes this vulnerability allows authenticated network attackers to read a subset of Siebel Call Center data. The public documents do not provide ex...