Virus Bulletin 2018: Exposing the Social Media Fraud Ecosystem

MONTREAL — While troll farms, influence campaigns and Twitter bots that spread disinformation have all become high-profile and negative aspects of the social-media universe, new research shows that there is actually a rich and complex supply chain behind these efforts. “Social-media fraud is...

reseller.sysob.de XSS vulnerability

Open Bug Bounty ID: OBB-672026 Description| Value ---|--- Affected Website:| reseller.sysob.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

siteground.com XSS vulnerability

Vulnerable URL: https://www.siteground.com/reseller/order.htm Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4404 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerabilit...

eNom Inter-Account Transfer Issue

the m group security advisory 2017090100: Zero-confirmation inter-account transfers of .uk domains with eNom Discovery date: 2017-05-02 Publish date: 2017-09-01 +122 days Product: https://www.enom.com/, the website for eNom Inc. and their APIs, all eNom resellers Vulnerable: yes, as of publicatio...

SMM Reseller Panel Indonesia - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application SMM Reseller Panel Indonesia published at the 'play' market has multiple vulnerabilities...

humanscale.com XSS vulnerability

Vulnerable URL: https://www.humanscale.com/about/where-to-buy/find-a-reseller.cfm Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 210197 VIP website status:| No Check humanscale.com...

Low-Cost Ransomware Service Discovered

A new ransomware as a service RaaS called Karmen has been discovered by security researchers at Recorded Future. This service allows anyone, including novices, to set up an account and customize their own ransomware campaign. The Karmen RaaS costs $175 and lets buyers set ransom prices, determine...

Unspecified Vulnerability in Softaculous Virtualizor WHMCS Module

softaculous is a tool that assists customers in quickly installing web programs. A security vulnerability in the WHMCS Reseller module in Softaculous Virtualizor prior to version 2.9.1.0 allows an attacker to take control of other virtual machines managed by Virtualizor by accessing a modified UR...

CVE-2017-6513

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL...

Design/Logic Flaw

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL...

CVE-2017-6513

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL...

CVE-2017-6513

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL...

CVE-2017-6513

Summary: CVE-2017-6513 affects Softaculous Virtualizor’s WHMCS Reseller Module V2 (version 2.0.2) prior to 2.9.1.0. Affected component: WHMCS Reseller Module for Virtualizor. Root cause (as stated): The module does not verify the user correctly, enabling a remote authenticated user to access a mo...

Fome SMS Portal 2.0 - SQL Injection

Fome SMS Portal 2.0 - SQL Injection Exploit Title: Fome SMS Portal Advanced - Bulk SMS Reseller v2.0 Script - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://ynetinteractive.com/ Software Buy:...

Fome SMS Portal 2.0 SQL Injection

Exploit Title: Fome SMS Portal Advanced - Bulk SMS Reseller v2.0 Script - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://ynetinteractive.com/ Software Buy: https://codecanyon.net/item/fome-sms-portal-advanced-bulk-sms-reseller-script/14241587 Demo:...

hostgator.com XSS vulnerability

Vulnerable URL: http://www.hostgator.com/reseller-hosting?alert/OPENBUGBOUNTY/...

Rig Exploit Kit Source Code Leaked

A spitting match between developers of the Rig Exploit Kit and one of its resellers resulted in a partial leak of the kit’s source code in a hacker forum. Rig is less than a year old and is spread primarily in malvertising campaigns, pushing Flash, Java and Microsoft Silverlight exploits; some...

Hosting Controller <= 6.1 Hotfix 3.1 Privilege Escalation Vulnerability

No description provided by source. Title: An attacker can gain reseller privileges and after that can gain admin privileges Version: 6.1 Hotfix = 3.1 Developer url: www.Hostingcontroller.com Solution: Update to Hotfix 3.2 Discover date: 2005,Summer Report date to hc company: Sat Jun 10, 2006...

JEEMA SMS 3.2 Joomla Component Multiple Vulnerabilities

No description provided by source. JEEMA SMS 3.2 Component Joomla Multiple Vulnerabilities Release Date Bug. 28-Oct-2011 Date Added. 30-January-2010 Vendor Notification Date. Never Product. JEEMA SMS Platform. Joomla Affected versions. 3.2 Type. Commercial Price. $115.00 Attack Vector. Multiple...

4psa voipnow professional 2.5.3 - Multiple Vulnerabilities

No description provided by source. 4PSA VoipNow Professional 2.5.3 Reflected XSS / CSRF Add Reseller Vulnerabilities ================================================================================== .:. Author : Aboud-el [email protected] .:. Script : http://www.4psa.com/ .:. Gr34T$ T0...