2151 matches found
Mythic - A Collaborative, Multi-Platform, Red Teaming Framework
A cross-platform, post-exploit, red teaming framework built with python3, docker, docker-compose, and a web browser UI. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout red teaming. Details Check out a series of YouTube videos...
Musk-Themed ‘$SpaceX’ Cryptoscam Invades YouTube Ads
YouTube fans have been swindled out of almost $1 million and counting thanks to an extremely convincing fake SpaceX crypto-coin campaign that uses a popular decentralized finance protocol called Uniswap. The scam is rearing its Elon-Musk-themed head in ads on YouTube that show up before and after...
WP YouTube Lyte < 1.7.16 - Authenticated Stored XSS
The plugin did not sanitise or escape its lyteytapikey and lytenotification settings before outputting them back in the page, allowing high privilege users to set XSS payload on them and leading to stored Cross-Site Scripting issues. PoC 1 | Authenticated Persistent XSS | Your YouTube API key: PO...
WP YouTube Lyte < 1.7.16 - Authenticated Stored XSS
The plugin did not sanitise or escape its lyteytapikey and lytenotification settings before outputting them back in the page, allowing high privilege users to set XSS payload on them and leading to stored Cross-Site Scripting issues. PoC PoC 1 | Authenticated Persistent XSS | Your YouTube API key...
FileCOPA FTP Server 1.01 Denial Of Service Exploit
!/usr/bin/perl e-mail: email protected Date: 04/06/2021 Version Vulnerable: FileCOPA FTP Server 1.01 OS Tested: Windows XP PACK 3 Brazilian e Windows 2000 Youtube video: https://youtu.be/A9cEoyY9Bd4 badchars \0x00\0x0a use Net::FTP; use Term::ANSIColor; $sis="$^O"; print $sis; if $sis eq "windows...
Kids on the Web in 2021: Infinite creativity
For over a year weve been living in a world gripped by the COVID-19 pandemic. Not only has the pandemic affected peoples lifestyles, it has also accelerated the development and implementation of technologies that make it easier for us to complete everyday and work-related tasks. We no longer need...
Keksec Cybergang Debuts Simps Botnet for Gaming DDoS
A recently developed botnet named “Simps” has emerged from the cyber-underground to carry out distributed denial-of-service DDoS attacks on gaming targets and others, using internet of things IoT nodes. It’s part of the toolset used by the Keksec cybercrime group, researchers said. According to t...
IPFire 2.25 Core Update 156 and Prior pakfire.cgi Authenticated RCE
This module exploits an authenticated command injection vulnerability in the /cgi-bin/pakfire.cgi web page of IPFire devices running versions 2.25 Core Update 156 and prior to execute arbitrary code as the root user. Module Options msf use exploit/linux/http/ipfire/pakfireexec msf...
Exploit for CVE-2020-14882
CVE-2020-14882 WebLogic Connect with me: Check YouTube -...
Exploit for Code Injection in Voipmonitor
CVE-2021-30461 VOIP RCE Technical details https://ssd-disclos...
WordPress WP YouTube Lyte plugin <= 1.7.15 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress WP YouTube Lyte plugin versions = 1.7.15. Solution Update the WordPress WP YouTube Lyte plugin to the latest available version at least 1.7.16...
Exploit for Cross-Site Request Forgery (CSRF) in Webmin
..| CVE-2021-31760 |.. Description : Exploiting a Cross-sit...
OpenEMR 5.0.2.1 - Remote Code Execution
Exploit Title: OpenEMR 5.0.2.1 - Remote Code Execution Exploit Author: Hato0, BvThTrd Date: 2020-08-07 Vendor Homepage: https://www.open-emr.org/ Software Link: https://sourceforge.net/projects/openemr/files/OpenEMR%20Current/5.0.2.1/openemr-5.0.2.tar.gz/download Version: 5.0.2.1 without patches...
Threat Source Newsletter (April 15, 2021)
Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. If you missed our webinar last week, we've got you covered. We've uploaded an extended version to our YouTube page that includes the scripts used in the presentation. This video will show you how to reverse-engineer and... This is...
Exploit for Server-Side Request Forgery in Vmware Cloud_Foundation
VMWare-CVE-2021-21975 VMWare-CVE-2021-21975 SSRF vulnerabil...
NtHiM - Super Fast Sub-domain Takeover Detection
NtHiM - Super Fast Sub-domain Takeover Detection Installation Method 1: Using Pre-compiled Binaries The pre-compiled binaries for different systems are available in the Releases page. You can download the one suitable for your system, unzip the file and start using NtHiM. Method 2: Using Crates.i...
Call of Duty Cheats Expose Gamers to Malware
Activision, the company behind Call of Duty: Warzone, has issued a warning that a threat actor is taking out ads for cheat tools, which instead turn out to be remote-access trojan RAT malware . The scam was first floated in March when a cyberattacker posted in hacking forums that they had a free,...
Malware Hidden in Call of Duty Cheating Software
News article: Most troublingly, Activision says that the "cheat" tool has been advertised multiple times on a popular cheating forum under the title "new COD hack." Gamers looking to flout the rules will typically go to such forums to find new ways to do so. While the report doesnt mention which...
Fugitive Identified on YouTube By His Distinctive Tattoos
A mafia fugitive hiding out in the Dominican Republic was arrested when investigators found his YouTube cooking channel and identified him by his distinctive arm tattoos...
