[ogrichardstallman]

Patch ur shit lmao. Contains >100k customers requesting service from Ukraine Telecom. Exploit.in links expires after 1000 downloads so save it.

https://send.exploit.in/download/6ea587c...486aSrOrWg
https://send.exploit.in/download/4ff027d...7Bea8FcV4Q

[Addka72424]

Patch ur shit lmao. Contains >100k customers requesting service from Ukraine Telecom. Exploit.in links expires after 1000 downloads so save it.

https://send.exploit.in/download/6ea587c...486aSrOrWg
https://send.exploit.in/download/4ff027d...7Bea8FcV4Q

sample:

CREATE TABLE `x808_requests_` (
  `id` int(10) unsigned NOT NULL AUTO_INCREMENT,
  `source` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_country` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_region` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_distinct` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_city` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_address` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_ip` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_email` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_phone` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_name` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_note` text COLLATE utf8mb4_unicode_ci,
  `service_name` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `date` datetime NOT NULL,
  `client_city_id` int(11) NOT NULL DEFAULT '0',
  `trade_partner` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `trade_point` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `trade_worker` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `utm_source` text COLLATE utf8mb4_unicode_ci,
  `utm_medium` text COLLATE utf8mb4_unicode_ci,
  `utm_campaign` text COLLATE utf8mb4_unicode_ci,
  `client_street` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_house` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `client_flat` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `processed` int(11) NOT NULL DEFAULT '0',
  `host` text COLLATE utf8mb4_unicode_ci,
  `host_id` int(11) NOT NULL DEFAULT '0',
  `app_id` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `wlead_id` varchar(3000) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `contract` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `token` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=171718 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
/*!40101 SET character_set_client = @saved_cs_client */;

LOCK TABLES `x808_requests_` WRITE;
/*!40000 ALTER TABLE `x808_requests_` DISABLE KEYS */;
INSERT INTO `x808_requests_` VALUES (1,'https://optica.ukrtelecom.ua/',NULL,'Киевская область','','м. Ирпень','TESTS','undefined','test@test.test','+38 (088) 888-88-88','TESTS',NULL,'','2020-03-15 11:06:35',0,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,'optica.ukrtelecom.ua',2,NULL,NULL,NULL,NULL),(2,'https://optica.ukrtelecom.ua',NULL,'Волинська','Ківерцівський','м. Ківерці','tests','185.11.29.234','','+38 (000) 000-00-00','tests',NULL,'FTTB \"100 Мбіт/с\"','2020-03-19 17:15:24',275,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,'https://optica.ukrtelecom.ua',2,NULL,NULL,NULL,NULL),(3,'https://optica.ukrtelecom.ua',NULL,'Вінницька','Іллінецький','м. Іллінці','tests','185.11.29.234','','+38 (000) 000-00-00','tests',NULL,'FTTB \"100 Мбіт/с\"','2020-03-19 17:16:20',20,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,'https://optica.ukrtelecom.ua',2,NULL,NULL,NULL,NULL),(4,'https://optica.ukrtelecom.ua',NULL,'Волинська','Ківерцівський','м. Ківерці','tests','185.11.29.234','','+38 (000) 000-00-00','tests',NU

[ogrichardstallman]

sample:[code]CREATE TABLE `x808_requests_` (

Thanks. Archive for anyone interested - https://archive.ph/vn90P

This is from a third party that manages their shit if you're interested (plus-karma[.]com). Still their customer data.

For some reason there is a file logging plaintext passwords every time someone logs into OctoberCMS? I don't know if this is a backdoor or "feature" but very stupid.

[PremiumTeam]

Thanks a lot! I'm going to check it out

[vortex335]

Is the link expired?

[oceancholic]

thanks for the share and as far as i understand "you shouldn't rely on third parties for your sensitive data".

[0sh1kuru]

Thanks for sharing bro.

[kixtart]

Patch ur shit lmao. Contains >100k customers requesting service from Ukraine Telecom. Exploit.in links expires after 1000 downloads so save it.

https://send.exploit.in/download/6ea587c...486aSrOrWg
https://send.exploit.in/download/4ff027d...7Bea8FcV4Q

These links are DEAD. Plz renew them.

[Tanaka]

The link in this thread is dead. Please reply to the PM you were sent to get your thread moved back to the Databases section.