CVE-2015-5505

The HTTP Strict Transport Security HSTS module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the "include subdomains" directive, which causes the HSTS policy to not be applied to subdomains and allows man-in-the-middle attackers to have unspecified impac...

HTTP Strict Transport Security - Moderately Critical - Logical Error - SA-CONTRIB-2015-118

The contributed HSTS module makes it easy for site administrators to implement HTTP Strict Transport Security HSTS by setting the Strict-Transport-Security header on each page generated by Drupal. HSTS module provides a configuration UI for the HSTS "include subdomains" directive, which indicates...

Automated basic digital reconnaissance: InstaRecon

Automated basic digital reconnaissance Great for getting an initial footprint of your targets and discovering additional subdomains. InstaRecon will do: DNS direct, PTR, MX, NS lookups Whois domains and IP lookups Google dorks in search of subdomains Shodan lookups Reverse DNS lookups on entire...

Udemy: Multiple sub domain are vulnerable because of leaking full path

At the following address i have found debug.log file disclose the application full path onthe server. https://business.udemy.com/wp-content/debug.log http://about.udemy.com/wp-content/debug.log THe below URLs showing the version number of the application : http://about.udemy.com/readme.html...

Mozilla Firefox lightweight theme installation allows bypass vulnerability

Mozilla Firefox is a web browser released by Mozilla. A security vulnerability exists in Mozilla Firefox that allows a man-in-the-middle attacker to spoof Moziall subdomains to bypass user consent information to install Firefox lightweight themes...

Angler Exploit Kit Uses Domain Shadowing technique to Evade Detection

The world’s infamous Angler Exploit Kit has become the most advanced, much more powerful and the best exploit kit available in the market, beating the infamous BlackHole exploit kit, with a host of exploits including zero-days and a new technique added to it. Angler Exploit Kit's newest technique...

Domain Shadowing Latest Angler Exploit Kit Evasion Technique

The Angler Exploit Kit continues to evolve at an alarming rate, seamlessly adding not only zero-day exploits as they become available, but also a host of evasion techniques that have elevated it to the ranks of the more formidable hacker toolkits available. Researchers at Cisco’s Talos intelligen...

Subdomain Enumeration Tool: SubBrute

SubBrute is a community driven project with the goal of creating the fastest, and most accurate subdomain enumeration tool. Some of the magic behind SubBrute is that it uses open resolvers as a kind of proxy to circumvent DNS rate-limiting /TA13-088A . This design also provides a layer of...

Lax Crossdomain Policy Puts Yahoo Mail At Risk

Yahoo has made strides in battening down its security in the last 12 months, most publicly with its decision to enable end-to-end encryption for its email service, turn on SSL by default, and encrypt links between its data centers. There are still some darkened corners of its infrastructure,...

All Seized Domains Returned to No-IP

Less than a week after Microsoft seized nearly two dozen domains owned by a small hosting provider as part of a takedown of a malware operation, all of those domains are back in the control of the provider, No-IP. When Microsoft announced the takedown on June 30, officials said that the company h...

Kloxo 6.1.18 Stable - CSRF Vulnerability

No description provided by source. Exploit Title :Kloxo 6.1.18 Stable CSRF Vulnerability Vendor Homepage :http://lxcenter.org/software/kloxo Version :6.1.18 Exploit Author :Necmettin COSKUN =@babayarisi Blog :http://www.ncoskun.com http://www.grisapka.org Discovery date :03/12/2014 CVE :N/A Kloxo...

Pinterest Launches Bug Bounty Program

Pinterest has become the latest major Web property to start a bug bounty program, joining the Bugcrowd platform and offering researchers rewards of up to…a shirt. The site, which enables users to post photos, recipes and other information, announced the new reward program Tuesday. Company officia...

Mail.ru: Unproper usage of Mobile Number that will lead to Information Disclosure

We know that our mobile number is connected to some subdomains of mail.ru like calendar, cloud and etc. I found out that using 1 Mobile Number can create or use it to MANY ACCOUNTS. This is what I did.. I have a main account in mail.ru Email: [email protected] with Mobile Number of: 639154219078...

Kloxo 6.1.18 Stable - Cross-Site Request Forgery

Kloxo 6.1.18 Stable - Cross-Site Request Forgery Exploit Title :Kloxo 6.1.18 Stable CSRF Vulnerability Vendor Homepage :http://lxcenter.org/software/kloxo Version :6.1.18 Exploit Author :Necmettin COSKUN =@babayarisi Blog :http://www.ncoskun.com http://www.grisapka.org Discovery date :03/12/2014...

Kloxo-MR 6.5.0 - Cross-Site Request Forgery

Kloxo-MR 6.5.0 - Cross-Site Request Forgery Exploit Title :Kloxo-MR 6.5.0 CSRF Vulnerability Vendor Homepage :https://github.com/mustafaramadhan/kloxo/tree/dev Version :Kloxo-MR 6.5.0.f-2014020301 Tested on :Centos 6.4 Exploit Author :Necmettin COSKUN =@babayarisi Blog :http://www.ncoskun.com...

Yahoo!: Almost all the subdomains are infected.

Thank you for your submission to Yahoo’s Bug Bounty program. While we recognize the effort that you put into the research and writing of a report for us to evaluate, but unfortunately this bug has already been reported to us. We appreciate your adherence to responsible disclosure guidelines and...

USN-1801-1: curl vulnerability

YAMADA Yasuharu discovered that libcurl was vulnerable to a cookie leak when doing requests across domains with matching tails. curl did not properly restrict cookies to domains and subdomains. If a user or automated system were tricked into processing a specially crafted URL, an attacker could...

[theHarvester v2.2a] Tool for Gathering

theHarvester is a tool for gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database. This tool is intended to help Penetration testers in the early stages of the penetration test in ord...

Tunisians Voice - Nawaat Portal hacked

Kosova Warriors Group deface a subdomain https://events.nawaat.org/ of Nawaat Portal.. Its an independent collective blog hosted by Tunisians. It gives a voice to all those who, through their civic engagement, take the cover and spread. Our editorial decisions are guided by among other concerns...

Mynet.com Cross Site Scripting

Exploit Title: Mynet XSS ALL Date: 10.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ---------------- http://cevaplar.mynet.com/ search box http://cevaplar.mynet.com/Search.aspx?q=%22%3E%3Cimg%20src=x%20onerror=prompt%28document.cookie%29;%3E " ----------------...