OxygenOS Elevation of Privilege Vulnerability

The OnePlus 3 and 3T are both smartphones from China's OnePlus Technology OnePlus.OxygenOS is the operating system it comes with. An elevation of privilege vulnerability exists in OxygenOS versions prior to 4.0.3. The vulnerability can be exploited by an attacker to execute arbitrary code and...

t-proj.jp XSS vulnerability

Vulnerable URL: http://t-proj.jp/twitter/?u=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=from Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 70062 VIP...

t-proj.com XSS vulnerability

Vulnerable URL: http://t-proj.com/twitter/?u=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=both Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31459 VIP...

Telekom Cloud SSO - Multiple Persistent XSS Vulnerabilities

Document Title: =============== Telekom Cloud SSO - Multiple Persistent XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2021 Incident ID: 20161205FKr02 Vulnerability Magazine:...

Telekom Cloud SSO - Multiple Persistent XSS Vulnerabilities

Document Title: =============== Telekom Cloud SSO - Multiple Persistent XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2021 Incident ID: 20161205FKr02 Vulnerability Magazine:...

TrueOnline / ZyXEL P660HN-T v1 Router Unauthenticated Command Injection Exploit

TrueOnline is a major ISP in Thailand, and it distributes a customised version of the ZyXEL P660HN-T v1 router. This customised version has an unauthenticated command injection vulnerability in the remote log forwarding page. This Metasploit module was tested in an emulated environment, as the...

TrueOnline / ZyXEL P660HN-T v2 Router Authenticated Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'TrueOnline / ZyXEL P660HN-T v2 Router Authenticated Command Injection', 'Description' = %q TrueOnline is a major ISP in Thailan...

TrueOnline / ZyXEL P660HN-T v2 Router Authenticated Command Injection Exploit

TrueOnline is a major ISP in Thailand, and it distributes a customized version of the ZyXEL P660HN-T v2 router. This customized version has an authenticated command injection vulnerability in the remote log forwarding page. This can be exploited using the "supervisor" account that comes with a...

TrueOnline / ZyXEL P660HN-T v1 Router Unauthenticated Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'TrueOnline / ZyXEL P660HN-T v1 Router Unauthenticated Command Injection', 'Description' = %q TrueOnline is a major ISP in...

TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection Exploit

TrueOnline is a major ISP in Thailand, and it distributes a customized version of the Billion 5200W-T router. This customized version has at least two command injection vulnerabilities, one authenticated and one unauthenticated, on different firmware versions. This Metasploit module will attempt ...

TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection', 'Description' = %q TrueOnline is a major ISP in Thailan...

OnePlus 3 and 3T Denial of Service Vulnerability

OnePlus 3 and 3T are two smartphones from OnePlus Technologies. A denial of service vulnerability exists in the OnePlus 3 and 3T. A remote attacker can exploit the vulnerability to reboot the device and cause a denial of service...

at&t and NetGear router information disclosure

No description provided by source...

ZyXEL P660HN-T v2 Router Unauthenticated Remote Command Execution Vulnerability

The ZyXEL P660HN-T v2 is a router manufactured by Hutchinson Technology. The ZyXEL P660HN-T v2 router suffers from an unauthenticated remote command execution vulnerability. Command injection in the ServerIP parameter and the presence of a default account on the device allow an attacker to exploi...

ZyXEL Billion 5200W-T Router Remote Command Execution Vulnerability

The ZyXEL Billion 5200W-T is a router manufactured by Hutchinson Technology. A remote command execution vulnerability exists in the ZyXEL Billion 5200W-T router. The toolstime.asp interface uiViewSNTPServer parameter allows an attacker to remotely execute arbitrary code due to command injection a...

TrueOnline / Billion 5200W-T Router Unauthenticated Command Injection

TrueOnline is a major ISP in Thailand, and it distributes a customized version of the Billion 5200W-T router. This customized version has at least two command injection vulnerabilities, one authenticated and one unauthenticated, on different firmware versions. This module will attempt to exploit...

TrueOnline / ZyXEL P660HN-T v1 Router Unauthenticated Command Injection

TrueOnline is a major ISP in Thailand, and it distributes a customized version of the ZyXEL P660HN-T v1 router. This customized version has an unauthenticated command injection vulnerability in the remote log forwarding page. This module was tested in an emulated environment, as the author doesn'...

TrueOnline / ZyXEL P660HN-T v2 Router Authenticated Command Injection

TrueOnline is a major ISP in Thailand, and it distributes a customized version of the ZyXEL P660HN-T v2 router. This customized version has an authenticated command injection vulnerability in the remote log forwarding page. This can be exploited using the "supervisor" account that comes with a...

EFF Blasts DEA in Ongoing Secret 'Super Search Engine' Lawsuit

The Electronic Frontier Foundation is accusing the Drug Enforcement Agency of improperly withholding documents in a court case that hopes to reveal details about the government’s controversial surveillance program known as Hemisphere. The EFF, which is suing the DEA as part of a Freedom of...

partner.sdg.msg.t-mobile.com XSS vulnerability

Vulnerable URL: https://partner.sdg.msg.t-mobile.com/tpim/public/login.jsp?loginStatus=failed Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...