396 matches found
“FudCo” Spam Empire Tied to Pakistani Software Firm
In May 2015, KrebsOnSecurity briefly profiled "The Manipulaters," the name chosen by a prolific cybercrime group based in Pakistan that was very publicly selling spam tools and a range of services for crafting, hosting and deploying malicious email. Six years later, a review of the social media...
CVE-2020-36033
SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php...
Sql injection
SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php...
CVE-2020-36033
SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php...
CVE-2020-36033
CVE-2020-36033 is a confirmed SQL injection vulnerability affecting SourceCodester Water Billing System 1.0 . The flaw is exploitable via the id parameter to edituser.php , as reported in multiple connected records. The NVD listing shows a CVSS v3.1 base score of 9.8 (CRITICAL) with network acces...
CVE-2020-36033
SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php...
Sourcecodester SourceCodester Water Billing System SQL注入漏洞
Sourcecodester SourceCodester Water Billing System is a water billing system from SourceCodester Sourcecodester, a U.S. company. SourceCodester Water Billing System has a security vulnerability. The vulnerability can be exploited by attackers to gain access to the database to obtain sensitive...
Ransomware Shuts Down US Pipeline
This is a major story: a probably Russian cybercrime group called DarkSide shut down the Colonial Pipeline in a ransomware attack. The pipeline supplies much of the East Coast. This is the new and improved ransomware attack: the hackers stole nearly 100 gig of data, and are threatening to publish...
File Upload Vulnerability in Lingfeng Certification Billing System of Shenzhen Shuangmeng Technology Co.
Lingfeng authentication billing system is a new generation of RADIUS authentication billing management software developed by Shenzhen Shuangmeng Technology Co. Shenzhen Shuangmeng Technology Co., Ltd. Symphony authentication billing system file upload vulnerability, attackers can use the...
SQL Injection Vulnerability in Synergy Certification Billing System
The business scope of Shenzhen Shuangmeng Technology Co., Ltd. includes: research and development and sales of computer software and hardware; research and development of network technology; technical research and development and sales of electronic and electrical products. There is a SQL injecti...
CVE-2020-25950
Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...
Cross site request forgery (csrf)
Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...
CVE-2020-25950
Vulnerability summary (CVE-2020-25950) : A CSRF flaw in Advanced Webhost Billing System 3.7.0 can delete a contact via the My Added Contact page. The affected component is the web application logic handling contact management; the root cause is insufficient validation of request origin for state-...
CVE-2020-25950
Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...
Awbs Advanced Webhost Billing System 跨站请求伪造漏洞
Awbs Advanced Webhost Billing System is a Php-based web billing management system for managed hosting from Awbs USA. The platform provides web hosting and or domain name registration business services, providing an automated solution for web hosting management. A cross-site request forgery...
Advanced Webhost Billing System 3.7.0 Cross Site Request Forgery
Exploit Title: Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery CSRF Date: 06/01/2021 Exploit Author: Rahul Ramakant Singh Vendor Homepage: https://www.awbs.com/ Version: 3.7.0 Tested on Windows Steps: 1. Login into the application with the help of email and password. 2. Navigat...
Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery (CSRF)
Exploit Title: Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery CSRF Date: 06/01/2021 Exploit Author: Rahul Ramakant Singh Vendor Homepage: https://www.awbs.com/ Version: 3.7.0 Tested on Windows Steps: 1. Login into the application with the help of email and password. 2. Navigat...
Nightflyza Ubilling Command Injection Vulnerability
Nightflyza Ubilling is an open source ISP billing system based on Php, stargazer by Nightflyza individual developers. A security vulnerability exists in Ubilling v1.0.9, which stems from Ubilling allowing remote commands to be executed as the root user. An attacker can exploit the vulnerability t...