Call Center Phone Fraud for Fun at Profit at Black Hat

Reconnaissance in the context of targeted attacks usually involves scouring freely available online resources such as social media and developer forums. Personal information willfully posted to these sites are clues a hacker can use to build a profile on a target, map systems and network...

Yahoo! Messenger 5.0 Call Center Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4837/info Yahoo! Messenger configures the 'ymsgr:' URI handler when it is installed. The handler invokes YPAGER.EXE with the supplied parameters. YPAGER.EXE accepts the 'call' argument; it is used for starting the 'Call...

Phishing Email Exposes Patient Data of 90,000

After opening a malicious attachment in a phishing email, an employee at University of Washington Medicine in Seattle may have exposed the personal information of more than 90,000 Harborview Medical Center and University of Washington Medical Center patients. The breach took place in October...

Voice Logger astTECS - bypass login & arbitrary file download

Author: Michal Blaszczak Website: http://blaszczakm.blogspot.com Project: hack voip - http://blaszczakm.blogspot.com/search/label/hack20voip Date: 16.07.2013 Voice Logger - VoIP software for Call Center 1 bypass login login: admin' or 1='1 password: admin line: 168 file: managerlogin.server.php 2...

Voice Logger SQL Injection / File Download Vulnerabilities

Voice Logger suffers from a remote SQL injection vulnerability that allows for authentication bypass as well as an arbitrary file download vulnerability. Author: Michal Blaszczak Website: http://blaszczakm.blogspot.com Project: hack voip - http://blaszczakm.blogspot.com/search/label/hack%20voip...

Voice Logger SQL Injection / File Download

Author: Michal Blaszczak Website: http://blaszczakm.blogspot.com Project: hack voip - http://blaszczakm.blogspot.com/search/label/hack%20voip Date: 16.07.2013 Voice Logger - VoIP software for Call Center 1 bypass login login: admin' or 1='1 password: admin line: 168 file: managerlogin.server.php ...

Code injection

Unspecified vulnerability in the Siebel Call Center component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Email - COMM Server Components...

CVE-2013-2399

CVE-2013-2399 affects Oracle Siebel CRM 8.1.1/8.2.2, specifically the Siebel Call Center component (Email - COMM Server Components). The Nessus entry notes this vulnerability allows authenticated network attackers to read a subset of Siebel Call Center data. The public documents do not provide ex...

Telephony Denial-of-Service Attacks Prompt Federal Attention

The call-center equivalent of network-based denial-of-service attacks, known as telephony denial-of-service TDoS, have targeted emergency services among other industries, enough to garner attention from the Department of Homeland Security, Federal Bureau of Investigation, Federal Communications...

VICIDIAL Call Center Suite - Multiple SQL Injections

VICIDIAL Call Center Suite - Multiple SQL Injections source: https://www.securityfocus.com/bid/55476/info VICIDIAL Call Center Suite is prone to multiple SQL-injection vulnerabilities and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploitin...

VICIDIAL Call Center Suite 2.2.1-237 - Multiple Vulnerabilities

VICIDIAL Call Center Suite 2.2.1-237 - Multiple Vulnerabilities ...:::::VICIDIAL call center suite Blind SQL Injection Vulnerability::::.... Sepahan TelCom IT Group septelcom ------------------------------------------------------- Date: 2012-09-07 Exploit Author: Sepahan TelCom IT Group septelcom...

VICIDIAL Call Center Suite <= 2.2.1-237 Multiple Vulnerabilities

Exploit for php platform in category web applications ...:::::VICIDIAL call center suite Blind SQL Injection Vulnerability::::.... Sepahan TelCom IT Group septelcom ------------------------------------------------------- Date: 2012-09-07 Exploit Author: Sepahan TelCom IT Group septelcom Vendor...

VICIDIAL Call Center Suite - Multiple SQL Injections

source: https://www.securityfocus.com/bid/55476/info VICIDIAL Call Center Suite is prone to multiple SQL-injection vulnerabilities and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to...

VICIDIAL Call Center Suite 2.2.1-237 - Multiple Vulnerabilities

...:::::VICIDIAL call center suite Blind SQL Injection Vulnerability::::.... Sepahan TelCom IT Group septelcom ------------------------------------------------------- Date: 2012-09-07 Exploit Author: Sepahan TelCom IT Group septelcom Vendor Homepage: http://www.vicidial.org Software Link:...

4.9 million Tricare patients data exposed in data breach

4.9 million Tricare patients data exposed in data breach About 4.9 million patients treated in San Antonio area military treatment facilities since 1992 have been affected by a health information breach involving the theft of backup tapes for electronic health records, federal officials say. Some...

Is it Safe to Speak? Protection for Telephone-Based Payment Card Data

Recently, the PCI Security Standards Council released educational resource requirements for securing cardholder data in audio recordings. The PCI SSC has been focusing on call center operations and recording systems of merchants. The need to provide a secure system to protect cardholder data is a...

Data Thief: Call Center Employee Pleads Guilty

A Bank of America call center employee has pleaded guilty to charges that he stole sensitive client information and then tried to sell it for cash. Read the full article. IDG News Service...

CVE-2009-2234

CVE-2009-2234 affects VICIdial Call Center Suite (example: 2.0.5-173) with multiple SQL injection vulnerabilities in admin.php. The root cause is unsafe handling of user-supplied input in the PHP_AUTH_USER and PHP_AUTH_PW parameters, allowing remote attackers to execute arbitrary SQL commands. Do...

CVE-2009-2234

Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the 1 Username parameter $PHPAUTHUSER and 2 Password parameter $PHPAUTHPW...

VICIDIAL Call Center Suite Default Administrative Credentials

The remote host is running the VICIDIAL Call Center Suite, a set of programs for Asterisk that act as a complete call center suite. The remote installation of VICIDIAL is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative...