284 matches found
CVE-2018-17388
SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to logincheck.php, or the id parameter to addemail.php or editcontent.php...
CVE-2018-17388
SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to logincheck.php, or the id parameter to addemail.php or editcontent.php...
Sql injection
SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to logincheck.php, or the id parameter to addemail.php or editcontent.php...
CVE-2018-17388
SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to logincheck.php, or the id parameter to addemail.php or editcontent.php...
CVE-2018-17388
CVE-2018-17388 affects Twilio WEB To Fax Machine System 1.0. The issue is an SQL Injection vulnerability in login_check.php (email/password parameters) and in add_email.php/edit_content.php (id parameter). The cited CVE indicates attacker-controlled input leads to SQL query manipulation, with pot...
Twilio WEB To Fax Machine System Application 1.0 - SQL Injection
Exploit Title: Fax Machine System Application 1.0 - SQL Injection Dork: N/A Date: 2019-01-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link: https://codecanyon.net/item/twilio-web-to-fax-machine-system-application-php-script/22139608 Version: 1.0 Category: Webapps...
Twilio WEB To Fax Machine System Application 1.0 - SQL Injection
Twilio WEB To Fax Machine System Application 1.0 - SQL Injection Exploit Title: Fax Machine System Application 1.0 - SQL Injection Dork: N/A Date: 2019-01-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link:...
Twilio WEB To Fax Machine System Application 1.0 SQL Injection
Exploit Title: Fax Machine System Application 1.0 - SQL Injection Dork: N/A Date: 2019-01-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link: https://codecanyon.net/item/twilio-web-to-fax-machine-system-application-php-script/22139608 Version: 1.0 Category: Webapps...
Twilio WEB To Fax Machine System Application 1.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Fax Machine System Application 1.0 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link: https://codecanyon.net/item/twilio-web-to-fax-machine-system-application-php-script/22139608...
Compromising Online Accounts by Cracking Voicemail Systems: VoiceMailAutomator
voicemailautomator is a tool that serves as a Proof of Concept for the research I presented at DEF CON 26, “Compromising online accounts by cracking voicemail systems”. voicemailautomator supports two actions: “message” – retrieves and records the newest message in the voicemail system. It return...
Eavesdropper Vulnerability Exposes Mobile Call, Text Data
UPDATE Mobile app developers who code using the Twilio cloud-based platform and are forgetful about removing their hardcoded credentials have put businesses messaging data at risk for exposure. The so-called Eavesdropper vulnerability, disclosed today by Appthority, has been around since 2011 and...
Monitor USB Devices: USB Canary
Monitor USB Devices for potential security breach USB Canary is a Linux tool that uses pyudev to monitor devices while your computer is locked. In case it detects someone plugging in or unplugging devices it can be configured to send you an SMS or alert you via Slack of the potential security...
Timing Attack
twilio-ruby is vulnerable to timing attacks. This vulnerability is caused because the signatures are not compared in constant time, allowing malicious users to guess the valid signatures are based on the time that a comparison takes...
Udemy: Completed Compromise & Source Code Disclosure via Exposed Jenkins Dashboard at https://jenkins101.udemy.com
Howdy, @udemy! Summary: ======= I am writing to inform you of a critical information disclosure bug via an exposed Jenkins dashboard located at https://jenkins101.udemy.com. Upon navigating to this address, I was asked to authenticate with my Github account. After authenticating, I was surprised ...
Drupal Twilio模块访问绕过漏洞
No description provided by source...
Drupal Twilio Module Access Bypass Vulnerability
Drupal is a free and open source content management system developed in PHP. twilio is one of the communication modules. An access bypass vulnerability exists in the Drupal Twilio module. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operation...
Twilio - Moderately Critical - Access bypass - SA-CONTRIB-2015-157
This module provides hooks and rules integration to leverage the Twilio API to send/receive phone calls and text messages. The module relies on existing permissions for providing administration which can lead to untrusted users having access to perform actions that may not be intended. This...
CVE-2014-9023
The Twilio module 7.x-1.x before 7.x-1.9 for Drupal does not properly restrict access to the Twilio administration pages, which allows remote authenticated users to read and modify authentication tokens by leveraging the "access administration pages" Drupal permission...
Authentication flaw
The Twilio module 7.x-1.x before 7.x-1.9 for Drupal does not properly restrict access to the Twilio administration pages, which allows remote authenticated users to read and modify authentication tokens by leveraging the "access administration pages" Drupal permission...
CVE-2014-9023
Summary (CVE-2014-9023): The Drupal Twilio module (7.x-1.x, affected versions prior to 7.x-1.9) exposes authentication tokens because access to the Twilio administration pages is not properly restricted. Remote authenticated users with the Drupal permission “access administration pages” can read ...