Command Execution Vulnerability in TamronOS IPTV System

TamronOS Tenglong.com was founded in 2008, is a professional technology company specializing in Linux routing, authentication billing, caching system, IPTV system, VOD system development. A command execution vulnerability exists in the TamronOS IPTV system, which can be exploited by attackers to...

Logic Flaw Vulnerability in TamronOS IPTV System

TamronOS Tenglong.com was founded in 2008, is a professional technology company specializing in Linux routing, authentication billing, caching system, IPTV system, VOD system development. A logic flaw vulnerability exists in the TamronOS IPTV system, which can be exploited by attackers to elevate...

Command Execution Vulnerability in TamronOS IPTV/VOD Systems

Weifang Home Station Electronic Technology Co., Ltd. is a professional technology company specializing in Linux routing, authentication billing, caching system, IPTV system, VOD system development. A command execution vulnerability exists in the TamronOS IPTV/VOD system, which can be exploited by...

SQL Injection Vulnerability in Property Integrated Billing Management Cloud Platform of Shenzhen Zhongdian Electric Power Technology Co.

Property integrated billing management system is based on cloud computing, Internet of Things and advanced intelligent billing management technology, realizes flexible access of intelligent power consumption data of electric power system and data of other intelligent terminals, supports...

Arbitrary File Deletion Vulnerability in Blue Ocean Premier Billing Management System

Blue Ocean Premier Billing Management System is a network security operation management system that is based on realizing network operation, centering on enhancing global security, and aiming at improving management efficiency. The Blue Ocean Excellence Billing Management System has an arbitrary...

SQL Injection Vulnerability in Blue Ocean Premier Billing Management System (CNVD-2021-43937)

Blue Ocean Premier Billing Management System is a network security operation management system that is based on realizing network operation, centering on enhancing global security and improving management efficiency. The Blue Ocean Excellence Billing Management System suffers from a SQL injection...

Command Execution Vulnerability in Blue Ocean Premier Billing Management System

Blue Ocean Premier Billing Management System is a set of network security operation management system which is based on realizing network operation, centering on enhancing global security, and aiming at improving management efficiency. A command execution vulnerability exists in the Blue Ocean...

How Mobile Ad Fraud has Evolved in the Year of the Pandemic

The past 18 months have arguably been the most turbulent on record for the mobile industry. The majority of the world spent significant portions of 2020 under some kind of lockdown, with pressure mounting on mobile operators to keep us connected to the outside world, and with each other. This...

Improper Access Control in causefx/organizr

✍️ Description Google Maps API key without proper referer restrictions is found in your repo. It can be embeded to anyone's website and if the billing account is active, it will incur charges on your account. 🕵️‍♂️ Proof of Concept Visit the following link to verify that you can use the service...

Improper Access Control in openwhyd/openwhyd

✍️ Description Youtube API key without proper referer restrictions is found in your repo. It can be embeded to anyone's website and if the billing account is active, it will incur charges on your account. 🕵️‍♂️ Proof of Concept Visit following link to verify anyone can access the api key:...

Improper Access Control in xamarin/googleplayservicescomponents

✍️ Description Google Maps API key without proper referer restrictions is found in your repo. It can be embeded to anyone's website and if the billing account is active, it will incur charges on your account. 🕵️‍♂️ Proof of Concept Visit the following links to verify that you can use the service by...

Improper Access Control in kenzo-404/lynx-userbot

✍️ Description Google Maps API key without proper referer restrictions is found in your repo. It can be embeded to anyone's website and if the billing account is active, it will incur charges on your account. 🕵️‍♂️ Proof of Concept Visit this link to verify that you can use the service by visiting...

Ransomware Shuts Down US Pipeline

This is a major story: a probably Russian cybercrime group called DarkSide shut down the Colonial Pipeline in a ransomware attack. The pipeline supplies much of the East Coast. This is the new and improved ransomware attack: the hackers stole nearly 100 gig of data, and are threatening to publish...

Cross-site Scripting (XSS) - Stored in bytefury/crater

✍️ Description Stored xss using customer billing address 🕵️‍♂️ Proof of Concept 1. First goto demo app https://demo.craterapp.com/admin/customers/create and create a customer . During creation put bellow xss payload in billing address field and save it . Now see xss is executed payload -- xss"'...

Over 750,000 Users Downloaded New Billing Fraud Apps From Google Play Store

Researchers have uncovered a new set of fraudulent Android apps in the Google Play store that were found to hijack SMS message notifications for carrying out billing fraud. The apps in question primarily targeted users in Southwest Asia and the Arabian Peninsula, attracting a total of 700,000...

UltimateKode Neo Billing Cross-Site Scripting Vulnerability

Envato Neo Billing is an Envato open source application. Provides a well-designed enterprise billing and accounting solution. UltimateKode Neo Billing before 3.5 suffers from a cross-site scripting XSS vulnerability that stems from the lack of proper validation of client-side data in the WEB...

CVE-2020-23518

Cross Site Scripting XSS vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to version 3.5 which allows remote attackers to inject arbitrary web script or HTML...

Cross site scripting

Cross Site Scripting XSS vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to version 3.5 which allows remote attackers to inject arbitrary web script or HTML...

CVE-2020-23518

Cross Site Scripting XSS vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to version 3.5 which allows remote attackers to inject arbitrary web script or HTML...

CVE-2020-23518

CVE-2020-23518 is a Cross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing (Envato/Neo Billing) up to version 3.5. The issue allows remote attackers to inject arbitrary web script or HTML, with evidence of stored XSS in the Neo Billing 3.5 release via manipulated fields (e.g., Subje...