Telekom Security

Jan 04, 2019 Honeypot Research

T-Pot Version 19.03 released

In Mach 2019 we released T-Pot 19.03. Read more Details here.

Dec 03, 2018 Security Advisory

WeBid Directory Traversal, Blind SQL Injection and XSS

Multiple vulnerabilities were identified in version 1.2.2 of the popular “WeBid” open source auction system. Patches for all three vulnerabilities are available in their GitHub, and will be included in the next release.

Jul 27, 2018 Security Advisory

ServiceNow Glide Scripting injection leading to privilege escalation

ServiceNow, an enterprise IT service management solution, is vulnerable to an templateinjection vulnerability, leading to a full privilege escalation.

Jul 10, 2018 Security Advisory

Variant of Satori/Mirai detected attacking public available ADB shells

On the 10th of July at 23:30 UTC we noticed an increased traffic on our blackhole monitoring on TCP port 5555. Upon further analysis, we saw a big chunk of this traffic coming from China, USA and the Dominican Republic. In total we gathe...

Apr 30, 2018 Security Advisory

Trovebox - Authentication Bypass, SQLi, SSRF

Trovebox, a photo sharing and management application, is prone to several criticalvulnerabilities. Exploiting is trivial and it is recommended to updateto the fixed version from Github.

Feb 23, 2018 Honeypot Research

Potherder: a Honeypot Story

It’s been seven years now that I started to contribute to the setup of Deutsche Telekom’s Early Warning System which is running multiple honeypots all over the globe and I would like to share my personal view on the history of the projec...

Nov 07, 2017 Honeypot Research

T-Pot Version 17.10 released

In October 2016 we releasedT-Pot 16.10

Nov 06, 2017 Honeypot Research

Opensourcing our Honeypot Backend (well, parts of it)

The last years we have consistently supported the community by releasing new versions of our multi honeypot platform called T-Pot. This November we areproud to release a new version of T-Pot with exciting new features and …something more.

Telekom Security Updates