Billion ADSL Router 400G 20151105641 Cross Site Scripting

Exploit Title: Billion ADSL Router 400G 20151105641 - Cross-Site Scripting Author: Cakes Discovery Date: 2018-09-30 Vendor Homepage: http://www.billion.com Software Link: http://billionfirmware.co.za Tested Version: 20151105641 Tested on OS: Kali Linux CVE: N/A Description: Improper input...

Billion ADSL Router 400G 20151105641 - Cross-Site Scripting

Exploit Title: Billion ADSL Router 400G 20151105641 - Cross-Site Scripting Author: Cakes Discovery Date: 2018-09-30 Vendor Homepage: http://www.billion.com Software Link: http://billionfirmware.co.za Tested Version: 20151105641 Tested on OS: Kali Linux CVE: N/A Description: Improper input...

BTC-e Operator, Accused of Laundering $4 Billion, to be Extradited to France

...

Microsoft to buy GitHub for $7.5 billion

By Carolina Following rumors that surfaced late last week, Microsoft has confirmed This is a post from HackRead.com Read the original post: Microsoft to buy GitHub for $7.5 billion...

billionauto.com XSS vulnerability

Open Bug Bounty ID: OBB-611450 Description| Value ---|--- Affected Website:| billionauto.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Germany’s Deutsche Bank transfers €28 billion to an account by mistake

By Carolina A couple of years ago, a massive bank heist was This is a post from HackRead.com Read the original post: Germany's Deutsche Bank transfers €28 billion to an account by mistake...

Facebook and Cambridge Analytica – What's Happened So Far

Top Story— Facebook has just lost over $60 billion in market value over the past two days—that's more than Tesla's entire market capitalisation and almost three times that of Snapchat. Facebook shares plunge over revelations that personal data of 50 million users was obtained and misused by Briti...

Carbon Black 2017 Threat Report: Non-Malware Attacks and Ransomware Continue to Own the Spotlight

As the calendar shifted from December 2016 to January 2017, the prospect of a large-scale cyberattack loomed. Questions over the possible hacking of the 2016 U.S. presidential election swirled and businesses faced a growing attack vector in ransomware. In 2016, ransomware was estimated to be an...

Denial Of Service (DoS)

python-openid is vulnerable to Denial of Service DoS attacks. The vulnerability exists due to the usage of an insecure Yardis XRDS parser which contains a series of weaknesses that allows XML attacks such as the Billion Laugh attack...

Trend Micro TippingPoint 8400TX Threat Protection System Receives “Recommended” Rating from NSS Labs

Organizations today are faced with an unenviable task: meeting market demands for continuous innovation and growth while keeping key systems and data safe from a growing range of cyber threats. To add to this already monumental task, it must all be done without disrupting network performance or...

All 3 Billion Yahoo Users Were Hacked in 2013 Data Breach

By Uzair Amir If you had an account on Yahoo back in the This is a post from HackRead.com Read the original post: All 3 Billion Yahoo Users Were Hacked in 2013 Data Breach...

2013 Yahoo Breach Affected All 3 Billion Accounts

A massive breach of Yahoo’s systems in 2013 impacted every account in existence at the time, the company said last night in a new filing with the Securities and Exchange Commission. Yahoo disclosed the breach last December when it revealed that it believed 1 billion accounts were compromised. Las...

The Ten Billion Dollar Alliance App Has a Logic Design Flaw

Ten Billion Affiliate App is a service platform that gives users rebate offers. Tianyi Union App has a logical design vulnerability, attackers can register any account and reset any account password by grabbing packets...

Updated perl-SOAP-Lite packages fix security vulnerability

It was discovered that there was a "Billion Laughs" 0 XML expansion vulnerability in SOAP::Lite CVE-2015-8978...

Paragon Initiative Enterprises: [Critical] billion dollars issue

Hey, My name is El-Sisi also i have famous name is بلحه Balaha and i have found documents that confirm you the github inc belong to you. if you need this documents give me reward and i will give u that documents. why i'm doing this because my mother tell me if you see some things like that you mu...

Android Gets Security Makeover With Google Play Protect

Mobile operating system Android received a big security makeover Wednesday with the introduction of Google Play Protect. At Google I/O, Google’s annual developer conference, the company teased a major update to its security platform that consists of a mix of new features, a rebranding of existing...

Business Email Compromise Losses Up 2,370 Percent Since 2015

Business Email Compromise BEC schemes, where executives are scammed via social engineering and phishing compromises that ultimately lead to fraudulent wire transfers, grew at a jaw-dropping rate of 2,370 percent in the last two years. The FBI yesterday published its latest statistics on these...

TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection', 'Description' = %q TrueOnline is a major ISP in Thailan...

TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection Exploit

TrueOnline is a major ISP in Thailand, and it distributes a customized version of the Billion 5200W-T router. This customized version has at least two command injection vulnerabilities, one authenticated and one unauthenticated, on different firmware versions. This Metasploit module will attempt ...

Billion TrueOnline ZyXEL Routers - Multiple Vulnerabilities

Billion TrueOnline ZyXEL Routers - Multiple Vulnerabilities Multiple vulnerabilities in TrueOnline / ZyXEL / Billion routers Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 26/12/2016 /...