Flaws in Tonga’s top-level domain left Google, Amazon, Tether web services vulnerable to takeover

Palisade researchers discovered an SQL injection vulnerability on the registrar website, abuse of which could enable attackers to obtain the plaintext DNS master passwords for '.to' domains.