Wikipedia Search Engine 1.0 Cross Site Scripting

Exploit Title: Wikipedia Search Engine PHP - xss Google Dork: N/A Date: 2017/31/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://www.codester.com/niagawebster Software Buy: https://www.codester.com/items/5328/wikipedia-search-engine-php Demo:...

PHP Web Stat 4.5.03 Cross Site Scripting

======================================================================== | Title : php web stat v4.5.03 xss vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 10 FranASSais V.Pro | Version : v4.5.03 | Vendor : http://wmscripti.com/ | Dork : Copyright Ac 20...

Shodanwave - Exploring and Obtaining Information from Netwave IP Camera

Shodanwave is a tool for exploring and obtaining information from cameras specifically Netwave IP Camera. The tool uses a search engine called shodan that makes it easy to search for cameras online. What does the tool to? Look, a list! Search Brute force SSID and WPAPSK Password Disclosure E-mail...

10 tips for safe online shopping on Cyber Monday

Shoppers familiar with the Cyber Monday circus know they’re stepping into the lion’s den. The Internet has always been a lawless place, but it becomes particularly rough during the holiday shopping season. In preparation for the frenzy, cyber villains have crafted a virtual onslaught of social...

[SECURITY] Fedora 27 Update: lucene-6.1.0-6.fc27

Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology suitable for nearly any application that requires full-text search, especially cross-platform...

[SECURITY] Fedora 27 Update: lucene-6.1.0-6.fc27

Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology suitable for nearly any application that requires full-text search, especially cross-platform...

Poisoning the Well: Banking Trojan Targets Google Search Results

This blog post was authored by Edmund Brumaghin, Earl Carter and Emmanuel Tacheau.SummaryIt has become common for users to use Google to find information that they do not know. In a quick Google search you can find practically anything you need to know. Links returned by a Google search, however,...

drcatalona.com XSS vulnerability

Open Bug Bounty ID: OBB-385110 Description| Value ---|--- Affected Website:| drcatalona.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

IRCCloud: Missing robots exclusion header for user uploads

User uploaded text files can be linked from external websites and end up appearing in search engine result pages if you perform a search such as: site:.irccloud-cdn.com ext:txt It's not possible to completely prevent such listings on all search engines, but some search crawlers support the...

Advanced Dork Searching Utility: Zeus-Scanner

Zeus is an advanced reconnaissance utility designed to make web application reconnaissance simple. Zeus comes complete with a powerful built-in URL parsing engine, multiple search engine compatibility, the ability to extract URLs from both ban and webcache URLs, the ability to run multiple...

Zeus Scanner - Advanced Dork Searching Utility

Zeus is a advanced dork searching tool that is capable of bypassing search engine API calls, search engine captchas, and IP address blocking from sending many requests to the search engine itself. Zeus can use three different search engines to do the search default is Google. Zeus has a powerful...

Gr8 Multiple Search Engine Script 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Gr8 Multiple Search Engine Script 1.0 - SQL Injection Dork: N/A Date: 12.09.2017 Vendor Homepage: http://www.gr8script.com/ Software Link: http://www.gr8script.com/multiplesearchscript.php Demo:...

Gr8 Multiple Search Engine Script 1.0 SQL Injection

Exploit Title: Gr8 Multiple Search Engine Script 1.0 - SQL Injection Dork: N/A Date: 12.09.2017 Vendor Homepage: http://www.gr8script.com/ Software Link: http://www.gr8script.com/multiplesearchscript.php Demo: http://www.gr8script.com/multiplesearch/ Version: 1.0 Category: Webapps Tested on:...

Gr8 Multiple Search Engine Script 1.0 - SQL Injection

Gr8 Multiple Search Engine Script 1.0 - SQL Injection Exploit Title: Gr8 Multiple Search Engine Script 1.0 - SQL Injection Dork: N/A Date: 12.09.2017 Vendor Homepage: http://www.gr8script.com/ Software Link: http://www.gr8script.com/multiplesearchscript.php Demo:...

Gr8 Multiple Search Engine Script 1.0 - SQL Injection

Exploit Title: Gr8 Multiple Search Engine Script 1.0 - SQL Injection Dork: N/A Date: 12.09.2017 Vendor Homepage: http://www.gr8script.com/ Software Link: http://www.gr8script.com/multiplesearchscript.php Demo: http://www.gr8script.com/multiplesearch/ Version: 1.0 Category: Webapps Tested on:...

PHP Search Engine 1.0 - SQL Injection

Exploit Title: PHP Search Engine 1.0 - SQL Injection Dork: N/A Date: 28.08.2017 Vendor Homepage: http://nelliwinne.net/ Software Link: https://www.codester.com/items/2975/php-search-engine-mysql-based-simple-site-search Demo: http://codester.nelliwinne.net/PHPSearchEngine/ Version: 1.0 Category:...

gesuche.de XSS vulnerability

Vulnerable URL: https://www.gesuche.de/cgi-bin/sucheprogressive.pl?suchanfrage=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg%20src=y%20onerror=alertopenbugbounty%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability...

Remote Exploitation of the NeoCoolcam IP Cameras and Gateway

Foreword The Internet of Connected Things has become a massive phenomenon during the past few years and will continue to grow at an incredible pace. More than 26 billion smart devices will be on the market by 2020, Gartner estimates. We’re looking at an explosive growth, as IoT opportunities...

New Linux Malware Exploits SambaCry Flaw to Silently Backdoor NAS Devices

Remember SambaCry? Almost two months ago, we reported about a 7-year-old critical remote code execution vulnerability in Samba networking software, allowing a hacker to remotely take full control of a vulnerable Linux and Unix machines. We dubbed the vulnerability as SambaCry, because of its...

Shodanwave - Explore & Obtain Information from Netwave IP Camera

Shodanwave is a tool for exploring and obtaining information from cameras specifically Netwave IP Camera. The tool uses a search engine called shodan that makes it easy to search for cameras online but not only that. Hack network cameras around the world, Very fun! What does the tool to? Look, a...