German Telekom Code Execution

Document Title: =============== German Telekom Bug Bounty 9 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1174 Dev Article:...

Telekom Bug Bounty #11 - SQL Injection Vulnerability

Document Title: =============== Telekom Bug Bounty 11 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1177 Dev Article:...

Telekom Bug Bounty #9 - Code Execution Vulnerability

Document Title: =============== Telekom Bug Bounty 9 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1174 Dev Article:...

Telekom BBounty #10 - Arbitrary File Upload Vulnerability

Document Title: =============== Telekom BBounty 10 - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1176 Dev Article:...

DeutschePost Website - Non Persistent Web Vulnerability

Document Title: =============== DeutschePost Website - Non Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=261 Release Date: ============= 2012-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 261...

DeutschePost Website - Non Persistent Web Vulnerability

Document Title: =============== DeutschePost Website - Non Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=261 Release Date: ============= 2012-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 261...

2 Bit Counter - Schaltanlage Deutsche Post

Document Title: =============== 2 Bit Counter - Schaltanlage Deutsche Post References: =========== Download: http://www.vulnerability-lab.com/resources/videos/358.wmv View: http://www.youtube.com/watch?v=pUC-JQRIEws Release Date: ============= 2011-12-15 Vulnerability Laboratory ID VL-ID:...

2 Bit Counter - Schaltanlage Deutsche Post

Document Title: =============== 2 Bit Counter - Schaltanlage Deutsche Post References: =========== Download: http://www.vulnerability-lab.com/resources/videos/358.wmv View: http://www.youtube.com/watch?v=pUC-JQRIEws Release Date: ============= 2011-12-15 Vulnerability Laboratory ID VL-ID:...

DB S Bahn Muenchen - SQL Injection Vulnerability

Document Title: =============== DB S Bahn Muenchen - SQL Injection Vulnerability Release Date: ============= 2011-08-14 Vulnerability Laboratory ID VL-ID: ==================================== 167 Product & Service Introduction: =============================== Official Website of Deutsche Bahn...

DB S Bahn Muenchen - SQL Injection Vulnerability

Document Title: =============== DB S Bahn Muenchen - SQL Injection Vulnerability Release Date: ============= 2011-08-14 Vulnerability Laboratory ID VL-ID: ==================================== 167 Product & Service Introduction: =============================== Official Website of Deutsche Bahn...

Operation Satiagraha - Brazil Corruption Scandal exposed, #Antisec provide 5GB of evidence

Operation Satiagraha - Brazil Corruption Scandal exposed , Antisec provide 5GB of evidence Once Again Pandora's box is open. In a joint move between LulzSec and Anonymous, as part of Operation Antisec, were released documents, photos, audio files and videos, exposing that wich was one of the...

Outdated and vulnerable OpenSource libraries used in "Deutsche Telekom" home banking software

The "Deutsche Telekom" resp. their "T-Online" branch offer their own home banking software for Windows under ftp://software.t-online.de/pub/service/banking/banking70.exe The current release is version 7.00.0004 from 2008-03-17. This software is but insecure; it installs and uses: - the libraries...

Deutsche Telekom banking software multiple security vulnerabilities

Outdated vulnerable versions of open source libraries are used...

Default credentials

bbanner.stm aka the login page on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source...

CVE-2008-1252

bbanner.stm aka the login page on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source...

CVE-2008-1252

The Speedport W500 router’s login page (b_banner.stm) exposes the logon password via the pwd field in the HTML source, enabling remote attackers to obtain credentials over the network. No remediation details are provided in the supplied documents.

CVE-2008-1252

bbanner.stm aka the login page on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source...

CVE-2007-2649

Deutsche Telekom T-com Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script...

Authentication flaw

Deutsche Telekom T-com Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script...

CVE-2007-2649

Deutsche Telekom T-com Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script...