MTN Group: Remote OS Command Execution on Oracle Weblogic server via [CVE-2017-10271]

Summary Hello. I was able to identify RCE vulnerability due to the outdated Oracle Weblogic instance on https://raebilling.mtn.co.za. Steps To Reproduce To reproduce, launch this request with BurpSuite This request to the https://raebilling.mtn.co.za/wls-wsat/CoordinatorPortType will trigger slee...

MTN Group: Exposed .bash_history at http://21days2017.mtncameroon.net/.bash_history

Summary: Dear Security Team, I found some dangerous urls on your servers that reveal important informations about the servers configuration themself and that are very interesting from a hacker point of view. Steps To Reproduce: http://21days2017.mtncameroon.net/.bashhistory Remediation disable th...

MTN Group: OTP bypass - Unintended disclosure of OTP to client allows attacker to manage users' subscriptions

Summary: https://play.mtn.co.za/ authenticates subscribers via OTP before their subscriptions to be changed. However, the request which sends the OTP also returns the OTP in the network response, allowing an attacker to manage a user's usbscriptions. Steps To Reproduce: 1. Visit...

MTN Group: Information Disclosure Microsoft IIS Server service.cnf in a mtn website

Hi there i found a information disclosure Microsoft IIS Server service.cnf file in the website https://www.mtn.co.za/ using firefox. In the following steps i will demonstrate how to reproduce the vulnerability. POC: 1ºGo to the following url: https://www.mtn.co.za/vtipvt/service.cnf you will see:...

MTN Group: Week Passwords generated by password reset function

Summary: Assessor observed that password reset function generates only alphanumeric passwords that is passwords don't contain any special characters Also User can set old password as new password. Steps To Reproduce: Goto https://mycontract.mtn.co.za/landing/landing.htm Click forget password link...

MTN Group: Information Disclosure FrontPage Configuration Information /_vti_inf.html in https://www.mtn.co.za/

Hi there i found a information disclosure Microsoft FrontPage configuration in the subdomain https://www.mtn.co.za/ that allows me to see version number and scripting paths off sharepoint using firefox. POC: Go to the following url: https://www.mtn.co.za/vtiinf.html and you will see a blank page...

MTN Group: SQL Injection on cookie parameter

Summary: Hello team. It seams one of the parameters in the cookies is vulnerable to SQL injection. Below requests has the lang parameter in cookies. If you inject one quote mark like '. You get SQL error with the syntax. By injecting a second you have the error removed. I did not attempt to...

MTN Group: Account Take over of millions of MTN users account due to lack of Rate limiting when sending OTP code

I attached a PDF document to this report which explained the vulnerability in full details and I also attached a link to the POC video in the document. Impact Account take over of about any MTN user account...

MTN Group: Upload directory of Mtn.co.sz has listing enabled

Summary: There are some exposed files accessible for anyone Steps To Reproduce: Go to http://www.mtn.co.sz/wp-content/uploads/ and navigate between available folders Impact Every uploaded data can be accessible through this directory listing vulnerability This might include several...

Man whose DDoS attacks took down entire country’s Internet jailed

By Waqas A court in London has sentenced a British and Israeli cyber criminal Daniel Kaye aka "BestBuy and Popopret" to two years and eight months in prison for conducting large scale DDoS attacks on Lonestar Cell MTN disrupting country's Internet and causing tens of millions of dollars in damage...

mtn.co.ug XSS vulnerability

Vulnerable URL: https://www.mtn.co.ug/Mobile%20Money/Services/pages/Payments-Lotto-Sports-Betting.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 139220 VIP websit...

Someone is Using Mirai Botnet to Shut Down Internet for an Entire Country

Note — We have published an updated article on what really happened behind the alleged DDoS attack against Liberia using Mirai botnet. Someone is trying to take down the whole Internet of a country, and partially succeeded, by launching massive distributed denial-of-service DDoS attacks using a...

mtn-investor.com XSS vulnerability

Vulnerable URL: http://www.mtn-investor.com/mtnar2012/reporttool.php?thisUrl="=xss Details: Description| Value ---|--- Patched:| Yes, at 01.09.2016 Latest check for patch:| 01.09.2016 15:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1934407 Google Pagerank|...

openSUSE Security Update : monotone (openSUSE-SU-2010:0936-1)

remote attackers could crash a monotone server via an empty argument to the 'mtn' command CVE-2010-4098. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update monotone-3505. The text description of...

Unfixed XSS vulnerability at www.mtnonline.com

Security researcher Uber0n, has submitted on 22/06/2008 a cross-site-scripting XSS vulnerability affecting www.mtnonline.com, which at the time of submission ranked 35368 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is current...