9364 matches found
Hunting for A New Stealthy Universal Rootkit Loader
In this entry, we discuss the findings of our investigation into a piece of a signed rootkit, whose main binary functions as a universal loader that enables attackers to directly load a second-stage unsigned kernel module...
blog-france-solaire-2020.fr Cross Site Scripting vulnerability OBB-3492296
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for Cross-site Scripting in Citrix Gateway
CVE-2023-24488 POC for CVE-2023-24488 Citrix Gateway...
Friday Squid Blogging: See-Through Squid
Doryteuthis opalescens is known as the market squid, and was critical in the recent squid RNA research. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...
CVE-2023-3474
A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...
Cross site scripting
A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2023-3474
The CVE-2023-3474 entry affects SimplePHPscripts Simple Blog 3.2, where an issue in the URL Parameter Handler’s preview.php functionality enables cross-site scripting. The vulnerability arises from manipulating an input parameter, allowing remote exploitation (network vector) with no privileges a...
CVE-2023-3474 SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting
A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2023-3474 SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting
A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2023-3474: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...
Moodle XSS
The vulnerability in the virtual learning environment Moodle is related to insufficient cleaning of user data during search operations on blogs. Exploiting this vulnerability can allow a malicious actor to carry out XSS attacks remotely...
PT-2023-24993 · Unknown · Simplephpscripts Simple Blog
Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Simple Blog version 3.2 Description: A vulnerability has been found in the file preview.php of the component URL Parameter Handler, which leads to cross site scripting. The attack can be launched remotely. Recommendations: Fo...
SimplePHPscripts Simple Blog Cross-Site Script Vulnerabilities
SimplePHPscripts Simple Blog is a blogging system from the Bulgarian company SimplePHPscripts. A cross-site scripting vulnerability exists in SimplePHPscripts Simple Blog version 3.2, which stems from a problem with the file preview.php that can lead to cross-site scripting...
CVE-2023-3447
creationtimestamp| type| source ---|---|--- 2023-06-29 12:14:00+00:00| seen| https://t.me/cibsecurity/65708 2026-04-09 05:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mizzm5wvik2v...
Simple Blog 3.2 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
How to Reach Compliance with HIPAA
Explore how to fulfil HIPAA compliance standards without friction...
Excel Data Forensics
In this detailed article about academic plagiarism are some interesting details about how to do data forensics on Excel files. It really needs the graphics to understand, so see the description at the link. And, yes, an author of a paper on dishonesty is being accused of dishonesty. Theres more...
Thinu-CMS Blog System 1.5 SQL Injection
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
Bejtlich Skills and Interest Radar from July 2005
This is unusual. I found this "skills and interest radar" diagram I created in July 2005. It looks like my attempt to capture and prioritize technical interests. At the time I was about to start consulting on my own, IIRC. Copyright 2003-2020 Richard Bejtlich and TaoSecurity...
blog-city.info Cross Site Scripting vulnerability OBB-3460137
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...