PT-2025-1881 · WordPress · The Dominion – Domain Checker

Name of the Vulnerable Software and Affected Versions: The Dominion – Domain Checker for WPBakery plugin for WordPress versions up to, and including, 2.2.2 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied...

Who’s Behind the “Reopen” Domain Surge?

The past few weeks have seen a large number of new domain registrations beginning with the word "reopen" and ending with U.S. city or state names. The largest number of them were created just hours after President Trump sent a series of all-caps tweets urging citizens to "liberate" themselves fro...

Karma - Search of Emails and Passwords on Pwndb

API pwndb Karma is a tool written in python3 for the search of emails and passwords on the site: pwndb2am4tzkvold dot onion Install sudo apt install tor python3 python3-pip git clone https://github.com/decoxviii/karma.git ; cd karma sudo -H pip3 install -r requirements.txt python3 bin/karma.py...

SMWYG-Show-Me-What-You-Got - Tool To Search 1.4 Billion Clear Text Credentials Which Was Dumped As Part Of BreachCompilation Leak

This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever before. Screenshot Above...

N4xD0rk - Listing Subdomains About A Main Domain

Listing subdomains about the main domain using the technique called Hacking with search engines. Usage usage: n4xd0rk.py -h -d DOMAIN -i IP -o OPTION -n SEARCH -e EXPORT -l LANGUAGE This script searchs the subdomains about a domain using the results indexed of Bing search. optional arguments: -h,...

RastLeak - Tool To Automatic Leak Information Using Hacking With Engine Searches

Tool to automatic leak information using Hacking with engine searches. How to install Install requirements with: pip install -r requirements.txt How to use: python rastleak.py Usage: $ python rastleak.py -h usage: rastleak.py -h -d DOMAIN -o OPTION -n SEARCH -e EXT -f EXPORT This script searchs...

Operative - The Fingerprint Framework

/ / / / / / / / / / | / / \ / // / // / / / / // / // /| |/ / / / ./// ,/// |// // This is a framework based on fingerprint action, this tool is used for get information on website or enterprise target Dependency & launching pip install -r requirements.txt python operative.py Youtube how...

easyname.it XSS vulnerability

Vulnerable URL: https://www.easyname.it/en/domain/search?domain=...

easyname.de XSS vulnerability

Vulnerable URL: https://www.easyname.de/en/domain/search?domain=...

easyname.fr XSS vulnerability

Vulnerable URL: https://www.easyname.fr/en/domain/search?domain=...

easyname.at XSS vulnerability

Vulnerable URL: https://www.easyname.at/en/domain/search?domain=...

easyname.co.uk XSS vulnerability

Vulnerable URL: https://www.easyname.co.uk/en/domain/search?domain=...

One million pages infected by Lilupophilupop SQL injection

One million pages infected by Lilupophilupop SQL injection ISC Internet Storm Center reported that lilupophilupop.com SQL injection attacks. There were about 80 pages infected according to Google searches few weeks back and now it raise to over 1 million . sites being injected with string :...

Microsoft Windows DHCPv6 DoS

RPC crashes on DHCP reply with empty Domain Search List...

New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and this modem was bough at...

Fedora 13 : dhcp-4.1.1-27.P1.fc13 (2010-17303)

Thu Nov 4 2010 Jiri Popelka - 12:4.1.1-27.P1 - Fix for CVE-2010-3611 649880 - Wed Oct 13 2010 Jiri Popelka - 12:4.1.1-26.P1 - Server was ignoring client's Solicit where client included address/prefix as a preference 634842 - Tue Sep 7 2010 Jiri Popelka - 12:4.1.1-25.P1 - Hardening...

Whois Server 2.0 Cross Site Scripting

another link for the exploit if it dosent appeared clearly : http://hell-z0ne.org/whois.txt + + |ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ +===================================================================|| Whois Server Version 2.0 XSS Vulnerability || ! Author ...