M3UAScan - A Scanner for M3UA protocol to detect Sigtran supporting nodes

A Scanner for M3UA protocol to detect Sigtran supporting nodes M3UA stands for MTP Level 3 MTP3 User Adaptation Layer as defined by the IETF SIGTRAN working group in RFC 4666 .M3UA enables the SS7 protocol's User Parts e.g. ISUP, SCCP and TUP to run over IP instead of telephony equipment like ISD...

WordPress WP-Contact-Widgets 1.4.1 Cross Site Scripting Vulnerability

WordPress WP-Contact-Widgets plugin version 1.4.1 suffers from a stored cross site scripting vulnerability. Exploit Title: Stored XSS on wp-contact-widgets 1.4.1 wordpress plugin Exploit Author: Boumediene KADDOUR Publisher: R&D Unit Algerie Telecom Version: 1.4.1 Application website:...

login.telecom.pt Open Redirect vulnerability

Vulnerable URL: https://login.telecom.pt/adfs/ls/?wa=wsignout1.0=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

login.telecom.pt XSS vulnerability

Vulnerable URL: https://login.telecom.pt/adfs/ls/?wa=wsignout1.0=javascript:prompt/OPENBUGBOUNTY/; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

Sichuan Telecom's Skywing Broadband Home Gateway TEWA-500E suffers from information leakage vulnerability

Sichuan Telecom Skywing Broadband Home Gateway TEWA-500E is a home version of the router. The Sichuan Telecom Tianyi Broadband Home Gateway TEWA-500E suffers from an information disclosure vulnerability, which can be exploited by an attacker to remotely restore the factory configuration and then...

China Telecom's Care eTone for Android has logical design flaws

Based on China Telecom's CDMA network and "Wing Positioning" technology, Caring eTone is designed for middle and high-end users of Telecom to query the location information of their family members at any time through their Skywing 3G smartphones and to facilitate the search of information around...

CVE-2017-9647

A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 PMB 8876 chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015...

Someone DDoSed Chinese Telecom Firm For 11 Days

By Waqas It seems like cyber criminals have taken the challenge to This is a post from HackRead.com Read the original post: Someone DDoSed Chinese Telecom Firm For 11 Days...

China Telecom's WingCloud Campus app has logic design flaws

China Telecom's Wing Cloud Campus app is a campus integrated service mobile manager. A logical design vulnerability exists in China Telecom's Wing Cloud Campus app. An attacker can exploit the vulnerability to arbitrarily log in to the system...

Reliance Jio Customers' Data Allegedly Hacked – Company Denies Breach

Personal details of some 120 Million customers have been allegedly exposed on the Internet in probably the biggest breach of personal data ever in India. Last night, an independent website named Magicapk.com went online, offering Reliance Jio customers to search for their identification data Know...

SigPloit - Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP

SiGploit a signaling security testing framework dedicated to Telecom Security professionals and reasearchers to pentest and exploit vulnerabilites in the signaling protocols used in mobile operators regardless of the geneartion being in use. SiGploit aims to cover all used protocols used in the...

compel.it XSS vulnerability

Open Bug Bounty ID: OBB-242882 Description| Value ---|--- Affected Website:| compel.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aswat-telecom.com XSS vulnerability

Vulnerable URL: http://www.aswat-telecom.com/?iclaction=reminderpopup=javascript%3Aalert%28%2FOPENBUGBOUNTY%2f%29%3b%2f%2f Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8202882 VI...

HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion Vulnerabilit

Exploit for multiple platform in category web applications Source: https://blogs.securiteam.com/index.php/archives/3087 SSD Advisory – HPE OpenCall Media Platform OCMP Multiple Vulnerabilities Want to get paid for a vulnerability similar to this one? Contact us at: email protected Vulnerabilities...

HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting Remote File Inclusion

HPE OpenCall Media Platform OCMP 4.3.2 - Cross-Site Scripting Remote File Inclusion Source: https://blogs.securiteam.com/index.php/archives/3087 SSD Advisory – HPE OpenCall Media Platform OCMP Multiple Vulnerabilities Want to get paid for a vulnerability similar to this one? Contact us at:...

HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion

Source: https://blogs.securiteam.com/index.php/archives/3087 SSD Advisory – HPE OpenCall Media Platform OCMP Multiple Vulnerabilities Want to get paid for a vulnerability similar to this one? Contact us at: [email protected] Vulnerabilities Summary The following advisory describes Reflected...

Vulnerability in orderid parameter of China Telecom's handheld business hall app mall order page.

China Telecom Pocket Business Office is a cell phone terminal-based application software that provides users with recharge and payment, cost inquiries and other services. There is a vulnerability in the orderid parameter of the order page of the China Telecom Palm Business Hall app, which allows ...

tcpdump buffer overflow vulnerability (CNVD-2017-02293)

tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the q933print function o...

The vulnerability of the Samsung operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the SmartCall Activity component in the Telecom operating system of the Samsung Mobile device is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or increase their privileges...

CVE-2016-6527

The SmartCall Activity component in Telecom application on Samsung Note device L5.0/5.1 and M6.0 allows attackers to cause a denial of service crash and reboot or possibly gain privileges via a malformed serializable object...