The Ten Billion Dollar Alliance App Has a Logic Design Flaw

Ten Billion Affiliate App is a service platform that gives users rebate offers. Tianyi Union App has a logical design vulnerability, attackers can register any account and reset any account password by grabbing packets...

Updated perl-SOAP-Lite packages fix security vulnerability

It was discovered that there was a "Billion Laughs" 0 XML expansion vulnerability in SOAP::Lite CVE-2015-8978...

Paragon Initiative Enterprises: [Critical] billion dollars issue

Hey, My name is El-Sisi also i have famous name is بلحه Balaha and i have found documents that confirm you the github inc belong to you. if you need this documents give me reward and i will give u that documents. why i'm doing this because my mother tell me if you see some things like that you mu...

Android Gets Security Makeover With Google Play Protect

Mobile operating system Android received a big security makeover Wednesday with the introduction of Google Play Protect. At Google I/O, Google’s annual developer conference, the company teased a major update to its security platform that consists of a mix of new features, a rebranding of existing...

Business Email Compromise Losses Up 2,370 Percent Since 2015

Business Email Compromise BEC schemes, where executives are scammed via social engineering and phishing compromises that ultimately lead to fraudulent wire transfers, grew at a jaw-dropping rate of 2,370 percent in the last two years. The FBI yesterday published its latest statistics on these...

TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection', 'Description' = %q TrueOnline is a major ISP in Thailan...

TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection Exploit

TrueOnline is a major ISP in Thailand, and it distributes a customized version of the Billion 5200W-T router. This customized version has at least two command injection vulnerabilities, one authenticated and one unauthenticated, on different firmware versions. This Metasploit module will attempt ...

Billion TrueOnline ZyXEL Routers - Multiple Vulnerabilities

Billion TrueOnline ZyXEL Routers - Multiple Vulnerabilities Multiple vulnerabilities in TrueOnline / ZyXEL / Billion routers Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 26/12/2016 /...

Billion / TrueOnline / ZyXEL Routers - Multiple Vulnerabilities

Multiple vulnerabilities in TrueOnline / ZyXEL / Billion routers Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 26/12/2016 / Last updated: 18/01/2017 Summary: TrueOnline is a major...

Denial Of Service (DoS) Via Billion Laugh Attack

resteasy is vulnerable to XML entity denial-of-service DoS, also known as billion laugh attacks. The attacks are possible because it bypasses the entity expansion limit set by JAXP when XXE is disabled...

ZyXEL TrueOnline / Billion Command Injection / Default Credentials Vulnerabilities

TrueOnline is a Thai ISP that distributes customized versions of ZyXEL and Billion routers - customized with vulnerabilities that is. The routers contain several default administrative accounts and command injections that can be abused by authenticated and unauthenticated attackers. =============...

Router Vulnerabilities Disclosed in July Remain Unpatched

Details on serious vulnerabilities in a number of routers freely distributed by a major Thai ISP were published on Monday after private disclosures made to the vendors in July went unanswered. Researcher Pedro Ribeiro of Agile Information Security found accessible admin accounts and command...

TrueOnline ZyXEL / Billion Command Injection / Default Credentials

=============== Multiple vulnerabilities in TrueOnline / ZyXEL / Billion routers Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 26/12/2016 / Last updated: 12/01/2017 Summary: TrueOnlin...

TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection

TrueOnline is a major ISP in Thailand, and it distributes a customized version of the Billion 5200W-T router. This customized version has at least two command injection vulnerabilities, one authenticated and one unauthenticated, on different firmware versions. This module will attempt to exploit...

Updated subversion packages fix security vulnerability

Subversion's moddontdothat module and clients using https:// are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack, otherwise known as the "billion laughs attack", targets XML parsers and can cause the targeted process to consume an excessive amount o...

MGASA-2017-0009 Updated subversion packages fix security vulnerability

Subversion's moddontdothat module and clients using https:// are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack, otherwise known as the "billion laughs attack", targets XML parsers and can cause the targeted process to consume an excessive amount o...

ZyXEL Billion 5200W-T Router Remote Command Execution Vulnerability

The ZyXEL Billion 5200W-T is a router manufactured by Hutchinson Technology. A remote command execution vulnerability exists in the ZyXEL Billion 5200W-T router. The toolstime.asp interface uiViewSNTPServer parameter allows an attacker to remotely execute arbitrary code due to command injection a...

Yahoo Admits 1 Billion Accounts Compromised in Newly Discovered Data Breach

In what believe to be the largest data breach in history, Yahoo is reporting a massive data breach that disclosed personal details associated with more than 1 Billion user accounts in August 2013. …And it's separate from the one disclosed by Yahoo! in September, in which hackers compromised as ma...

Billion Router 7700NR4 Remote Root Command Execution

Title : Billion Router 7700NR4 Remote Root Command Execution Date : 06/10/2016 Author : R-73eN Tested on: Billion Router 7700NR4 Vendor : http://www.billion.com/ Vulnerability Description: This router is a widely used here in Albania. It is given by a telecom provider to the home and bussiness...

Billion 7700NR4 Router - Remote Command Execution

Title : Billion Router 7700NR4 Remote Root Command Execution Date : 06/10/2016 Author : R-73eN Tested on: Billion Router 7700NR4 Vendor : http://www.billion.com/ Vulnerability Description: This router is a widely used here in Albania. It is given by a telecom provider to the home and bussiness...