Telekom Security

May 20, 2019 Security Advisory

wolfSSL TLSv1.3 Remote Buffer Overflow

A new critical remote buffer overflow vulnerability (CVE-2019-11873) was discovered in the wolfSSL library (version 4.0.0-stable, http://www.wolfssl.com) by Security Evaluators of Telekom Security with modern fuzzing methods. The vulnera...

Mar 22, 2019 Security Advisory

axTLS Remote Buffer Overflow

A new critical remote buffer overflow vulnerability (CVE-2019-8981) in the axTLS library for embedded devices (version 2.1.4, http://axtls.scourceforge.net was discovered on 2019 February 20 with modern fuzzing methods, which possibly al...

Jan 04, 2019 Honeypot Research

T-Pot Version 19.03 released

In Mach 2019 we released T-Pot 19.03. Read more Details here.

Dec 03, 2018 Security Advisory

WeBid Directory Traversal, Blind SQL Injection and XSS

Multiple vulnerabilities were identified in version 1.2.2 of the popular “WeBid” open source auction system. Patches for all three vulnerabilities are available in their GitHub, and will be included in the next release.

Jul 27, 2018 Security Advisory

ServiceNow Glide Scripting injection leading to privilege escalation

ServiceNow, an enterprise IT service management solution, is vulnerable to an templateinjection vulnerability, leading to a full privilege escalation.

Jul 10, 2018 Security Advisory

Variant of Satori/Mirai detected attacking public available ADB shells

On the 10th of July at 23:30 UTC we noticed an increased traffic on our blackhole monitoring on TCP port 5555. Upon further analysis, we saw a big chunk of this traffic coming from China, USA and the Dominican Republic. In total we gathe...

Apr 30, 2018 Security Advisory

Trovebox - Authentication Bypass, SQLi, SSRF

Trovebox, a photo sharing and management application, is prone to several criticalvulnerabilities. Exploiting is trivial and it is recommended to updateto the fixed version from Github.

Feb 23, 2018 Honeypot Research

Potherder: a Honeypot Story

It’s been seven years now that I started to contribute to the setup of Deutsche Telekom’s Early Warning System which is running multiple honeypots all over the globe and I would like to share my personal view on the history of the projec...

Telekom Security Updates