New Struts2 Remote Code Execution exploit caught in the wild

Two days ago Apache has published a fix for the new Remote Code Execution vulnerability in Struts2. Struts2 RCE attacks in the wild This vulnerability allows attacker to execute arbitrary Java code on the application server. We can confirm that caught the first exploit for this vulnerability from...

Job Portal Script 3.0 Cross Site Scripting / SQL Injection

Title: Job portal Script v3.0 - SQL Injection / Cross Site Scripting Credit: Bilal KARDADOU Vendor: www.jobportalscript.com Vendor URL: http://www.jobportalscript.com/index.html Product: Job portal site. Google Dork: categorysearch.php?indus= placementpaper.php?pn= ... Product & Service...

Job Portal Script 3.0 Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Title: Job portal Script v3.0 - SQL Injection / Cross Site Scripting Credit: Bilal KARDADOU Vendor: www.jobportalscript.com Vendor URL: http://www.jobportalscript.com/index.html Product: Job portal site. Google Dork: categorysearch.php?indus=...

The green Alliance Web application firewall arbitrary command execution vulnerability

Green UNITA, Web application firewall, NSFOCUS Web Application Firewall, also known as Web application protection system, referred to as WAF is a green Union company Research and development of Web Security Products. The green Alliance Web application firewall there is an arbitrary command...

waf-audio.com XSS vulnerability

Vulnerable URL: http://www.waf-audio.com/products.php?pos=1" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4486428 VIP website status:| No Check waf-audio.com SSL connection:|...

WAF Security Benchmark: WAFPASS

WAF Security Benchmark WAFPASS Analysing parameters with all payloads’ bypass methods, aiming at benchmarking security solutions like WAF. Today a great number of website owners around the globe use “Web Application Firewalls” to improve their security. However, these security applications suffer...

U.S. Dept Of Defense: HTML Injection on ████

Summary: HTML Injection vulnerabilities on █████████ Air Base Site. Description: Search value are output without being escaped. HTML Injection via Category parameter...

Dell SonicWALL Secure Mobile Access SMA 8.1 - Cross-Site Scripting / Cross-Site Request Forgery

Exploit for hardware platform in category web applications Dell SonicWALL Secure Mobile Access SMA 8.1 XSS And WAF CSRF Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/secure-mobile-access/ Affected version: 8.1 SSL-VPN Summary: Keep up with the demands of today’s remote...

Dell SonicWALL Secure Mobile Access SMA 8.1 CSRF / XSS

i? Dell SonicWALL Secure Mobile Access SMA 8.1 XSS And WAF CSRF Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/secure-mobile-access/ Affected version: 8.1 SSL-VPN Summary: Keep up with the demands of todayas remote workforce. Enable secure mobile access to critical apps an...

Dell SonicWALL Secure Mobile Access SMA 8.1 - Cross-Site Scripting / Cross-Site Request Forgery

Dell SonicWALL Secure Mobile Access SMA 8.1 XSS And WAF CSRF Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/secure-mobile-access/ Affected version: 8.1 SSL-VPN Summary: Keep up with the demands of today’s remote workforce. Enable secure mobile access to critical apps and...

Dell SonicWALL Secure Mobile Access SMA 8.1 - Cross-Site Scripting Cross-Site Request Forgery

Dell SonicWALL Secure Mobile Access SMA 8.1 - Cross-Site Scripting Cross-Site Request Forgery Dell SonicWALL Secure Mobile Access SMA 8.1 XSS And WAF CSRF Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/secure-mobile-access/ Affected version: 8.1 SSL-VPN Summary: Keep up wi...

Dell SonicWALL Secure Mobile Access SMA 8.1 XSS And WAF CSRF

Summary Keep up with the demands of today’s remote workforce. Enable secure mobile access to critical apps and data without compromising security. Choose from a variety of scalable secure mobile access SMA appliances and intuitive Mobile Connect apps to fit every size business and budget...

Boozt Fashion AB: Email link poisoning / Host header attack

Description ------------- It is possible to poison the link of the password reset email. This is generally done by altering the Host header, but in this case, the WAF is successfully blocking it. The trick here is to add an X-Forwarded-Host header in the request so the server is using this value...

jSQL Injection v0.77 - Java application for automatic SQL database injection

jSQL Injection is a lightweight application used to find database information from a distant server. It's is free , open source and cross-platform Windows, Linux, Mac OS X. jSQL Injection is also part of the official penetration testing distribution Kali Linux and is included in distributions lik...

WAFNinja - Penetration testers favorite for WAF Bypassing

WAFNinja is a CLI tool written in Python. It shall help penetration testers to bypass a WAF by automating steps necessary for bypassing input validation. The tool was created with the objective to be easily extendible, simple to use and usable in a team environment. Many payloads and fuzzing...

QIWI: [contact-sys.com] XSS /ajax/transfer/status trn param

Уязвимый сценарий: https://contact-sys.com/ajax/transfer/status Уязвимый параметр: trn Некорректный content-type. Нормальный пейлоад блокируется WAFом. PoC html XSS" / document.getElementById"xss".submit; HTTP Request http POST /ajax/transfer/status HTTP/1.1 Host: contact-sys.com User-Agent:...

penetration

相信很多小伙伴都知道XSS测试，至于如何更加有效地插入载荷是一件重复性的高强度劳动工作, 在此本文介绍了一款自动进行插入XSS，并且可以自定义攻击载荷。 这些载荷从几十条到几百条甚至几千条。该脚本也同时包含了一些绕过各种WAF的语句。 0×01 BruteXSS BruteXSS是一个非常强大和快速的跨站点脚本暴力注入。它用于暴力注入一个参数。 该BruteXSS从指定的词库加载多种有效载荷进行注入并且使用指定的载荷和扫描检查这些参数很容易受到XSS漏洞。 得益于非常强大的扫描功能。在执行任务时,BruteXSS是非常准确而且极少误报。...

OLX: XSS @ *.letgo.com

Hi, Zawad again. This time I checked letgo.com and found XSS there. I hope you will reward all bugs reported now, when you start offering cash ;- , kidding Description I first looked at the search box and enter random text and checked the HTML codes, looked like you weren't filtering texts. But...

Rockstar Games: Reflected XSS in reddeadredemption Site located at www.rockstargames.com/reddeadredemption

The researcher found that one of our video players had a Reflected XSS vulnerability, and was able to demonstrate the vulnerability with a POC. The POC also included a WAF bypass, allowing us to fix two problems at once, so in recognition of that fact we opted to award a bonus...

Identify Web Application Firewall: WAFW00F

WAFW00F Fingerprints and Identify Web Application Firewall WAF products WAFW00F is a Python tool to help you fingerprint and identify Web Application Firewall WAF products. It is an active reconnaissance tool as it actually connects to the web server, but it starts out with a normal HTTP response...