lftp <= 2.6.9 - Remote Stack based Overflow Exploit

No description provided by source. / lftp remote stack-based overflow exploit by Li0n7 voila fr Vulnerability discovered by Ulf Harnhammar Ulf.Harnhammar.9485 student uu se Lftp versions later than 2.6.10 are prone to a remotly exploitable stack-based overflow in trynetscapeproxy and trysquideplf...

Slack: Open Redirect login account

An open redirect is an application that takes a parameter and redirects a user to the parameter value without any validation. This vulnerability is used in phishing attacks to get users to visit malicious sites without realizing it. Reproduction Instructions go to...

Slack: SSRF on https://whitehataudit.slack.com/account/photo

During post request to https://whitehataudit.slack.com/account/photo: POST /account/photo HTTP/1.1 Host: whitehataudit.slack.com User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.9; rv:29.0 Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8...

Slack: Remote file Inclusion - RFI in upload

Hello, Everysite has a RFI vulnerability. Everysite i.e .slack.com is having this vulnerability. Proof of concept / Steps to Reproduce : ================================= 1. Sign in to your account on slack eg. I signed in https://pran3hiva.slack.com 2. Now, go to 'Change photo'. i.e...

Slack: XSS in gist integration

Create a gist called: " 2. have gist integration enabled and put a link in a slack chat 3. Visit the 'raw' or 'new window' pages for this gist, for example: https://outpost.slack.com/files/zemnmez/F029MDY33/svgonloadalert1...

Slack: Stored XSS in slack.com (integrations)

Hi Slack, i'm going to report stored xss in slack integrations. Attack String Payload: http://jeroldcamacho.com/%5Ex1s1s/slack.com.txt Proof of Concept: here is the videoVideo. video: https://www.dropbox.com/s/3qfo5fdezn6ci2q/slack.com%20xss.avi Thanks, Jerold Camacho...

Slack: Stored XSS Found

The type of XSS Vulnerability I found on your website is a stored xss. after i connect my github account and add a new integration then i chose my repositories then on the right side of that is a textfield that has a placeholder of Branches optional. then i put the following code on that textfiel...

Slack: open redirect in https://slack.com

Navigate to Https://slack.com append "/link?url=url=http://bing.com" or enter any website of your choice with http:// vulnerable link https://slack.com/link?url=http://bing.com notice that user is redirected to bing.com without being validated or notified...

Slack: Facebook Takeover using Slack using 302 from files.slack.com with access_token

Hi, I noticed that your Facebook application used in the "Import Photo" can be used to take over the Facebook account of the user being attacked. It's multiple issues in one: 1. You have a 302 redirect from a .slack.com domain. Hash-values will follow the redirect. 2. The Facebook application OAu...

Slack: Duplicate of #4550

Here's the duplicate ticket you asked for 4550 XSS in Slack Redirection...

Slack: Stored XSS in Slackbot Direct Messages

Whenever a new team is created, Slackbot uses automated profile completion by asking a few questions from the user like the first name, last name, skype account etc. But instead of providing the correct details we provide as input then Slackbot will cause the data go inside the anchor tag ... so...

Slack: Open Redirect in Slack

This link shall redirect to google.co.in: http://prakhar.slack.com/link?url=http%3A%2F%2Fgoogle.co.in Straight, open redirection! Thanks!...

Slack: Content Spoofing

Here is an unvalidated insertion of an image, resulting to content spoofing https://awayon.slack.com/account/photo?url=http://www.thenewstribe.com/wp-content/uploads/2014/01/Syrian-Electronic-Army-hacked-CNN.jpg It displays any photo, what the attacker must know is just the "awayon" or the team...

Slack: Stored XSS

Hi, Go to this URL https://sehacure.slack.com/account/preferences?updatedhighlightwords=1 and in the highlight words option please fill the XSS vector as promptdocument.cookie; Your cookie will be reflected. Best regards, Anand...

Slack: Reflected Xss

go to https://auth.slack.com/generate/ 2. input username and password, and submit the request. 3. In the next step application asks for the password you just created like the application says "We're almost done. Just need to test that you remember your password. Enter it again for me". Enter the...

Slack: Email enumeration

Navigate to the page - https://slack.com/signin Now, entering invalid email address returns an erroneous response. However, if you enter a valid email address like [email protected], it redirects you to a different page where it asks you to choose teams that belongs to [email protected]. You can then...

Slack: Open redirect vulnerability

Hi, Open redirect issue: 1 Go to this URL: https://sehacure.slack.com/link?url=http://www.likelo.com The victim will be redirected. Impacts: The attacker can force the user to install trojans,malwares, etc. into his system. And can conduct phishing attacks. Please have a check. Best regards, Anan...

Slack: Stored XSS in Channel Chat

Hi there is a stored XSS in Channel Chat feature. I strong believe this a critical stored XSS I've made a video as POC and Reproduction steps here: - https://www.dropbox.com/s/2opkr6ojsseo1ka/Slack-Chat-Stored-XSS.mov Thanks and Regards Prakhar Prasad...

Slack: Stored XSS on this link https://sehacure.slack.com/help/requests/

Hi, This is a little tricky one. First of all go to your profile page and change your name to " Save it. Wait!!! You will not see a javascript pop up there because there is proper input validation on the profile page. Now to see the prompt box 1 Go to this link...

Slack: CSRF on add comment section

Hi, Steps to repro: 1 Go to this link https://sehacure.slack.com/help/requests/237956 2 The malicious guy should now the request number and the username. 3 Open Tamper data using tamper data firefox addon,Fill the reply in the form. 4 Submit the request.You will see there are no anti-csrf token i...