1179 matches found
Become a Cybersecurity Expert with 18 New Online Courses @ 98% OFF
With more data stored in the cloud than ever before, now is a good time to get into cybersecurity. Many top corporations are looking for new talent, and even junior professionals can earn $80,000 or more. The only barrier to entry is education. How do you learn about security protocols and white...
Full account takeover
POC: Step 1: Use a normal user account Step 2: Change user password in edit profile function Step 3: Enter data fields that change normally Step 4: Use burp suite to intercept requests to update profile Step 5: Change id from 2 to id 1 and send request The result of logging in with the new userna...
WordPress SeatReg 1.23.0 Open Redirect
Exploit Title: WordPress Plugin βSeatRegβ - Unauthenticated Open Redirect Date: 01-08-2022 Exploit Author: Mariam Tariq - HunterSherlock Vendor Homepage: https://wordpress.org/plugins/seatreg/ Version: 1.23.0 Tested on: Firefox Contact me: [email protected] Description: An Open Redirection...
Wavlink WN533A8 Cross Site Scripting
Exploit Title: Wavlink WN533A8 - Cross-Site Scripting XSS Exploit Author: Ahmed Alroky Author Company : AIactive Version: M33A8.V5030.190716 Vendor home page : wavlink.com Authentication Required: No CVE : CVE-2022-34048 Tested on: Windows Poc code history.pushState'', '', '/'...
[Bypass] Cross-site Scriptin (XSS) via file upload
ποΈ Requirements Privileges: User. π Description I found a bypass to this report by uploading the file with "public": true, parameter. This is due to the fact that AWS bucket public folder does not auto download files when we access them. π΅οΈββοΈ Proof of Concept Step 1: Go your outline home and...
LFI / Path Traversal allows attacker to read any file in the working directory
Description The file upload functionality allows a user to attach a file to a paste. When an attacker views the attached file he can alter the path e.g. via burpsuit and read any file in the working directory via the relative path. This also accounts for private pastes. The attacker needs...
CVE-2022-35406
A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect...
CVE-2022-35406
A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect...
CVE-2022-35406
A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect...
Design/Logic Flaw
A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect...
CVE-2022-35406
A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect...
CVE-2022-35406
Burp Suite (PortSwigger) prior to 2022.6 is affected by a URL disclosure issue where viewing a crafted response in Repeater or Intruder could be interpreted as a redirect, potentially exposing the referrer. Root cause involves incorrect handling of crafted responses leading to unexpected redirect...
PT-2022-22807 Β· Portswigger Β· Burp Suite
Name of the Vulnerable Software and Affected Versions: Burp Suite versions prior to 2022.6 Description: A URL disclosure issue was discovered. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect. Recommendations: For versions prior to...
Burp Suite θΎε ₯ιͺθ―ιθ――ζΌζ΄
PortSwigger Burp Suite is an application from PortSwigger UK. Software used for packet-catching proxies. A security vulnerability exists in Burp Suite versions prior to 2022.6, which stems from a URL leak...
No Rate Limit On Reset Password Page
Description I have identified that when Reset Password for account , the request has no rate limit which then can be used to loop through one request. This can annoy to the root users sending mass password to one email. A rate limiting algorithm is used to check if the user session or IP-address...
U.S. Dept Of Defense: [βββββββ] Remote Code Execution at ββββββ [CVE-2021-44529] [HtUS]
IP Address used to find vulnerability: ββββββ Vulnerable Website URL or Application: https://ββββ pomcldsvr2.ββββ Proof of ownership: βββ Summary: The server at https://βββ is running a vulnerable version of CSA. A code injection vulnerability in the Ivanti EPM Cloud Services Appliance CSA allows...
Idor Lead to Delete exported data file
Description In this case attacker is able to delete requested export data file Steps to repro:- 1.Create 2 accounts 2.Login in both account and goto export section and create new export in both account 3.Delete acc1's exported file and capture this request in burp suite and change the id of this...
Privilege Escalation via edit response body
Description Recently, i found a business logic vulnerabity and this vulnerability allow reader user perform privilege escalation on allaccess user. Because before user perform any function, client-side will perform OPTIONS request to view user permission with specify function via response body. I...
Admin-Panel_Finder - A Burp Suite Extension That Enumerates Infrastructure And Application Admin Interfaces (OTG-CONFIG-005)
A burp suite extension that enumerates infrastructure and application Admin Interfaces. OWASP References: Classification : Web Application Security Testing 02-Configuration and Deployment Management Testing OTG v4 : OWASP OTG-CONFIG-005 WSTG : WSTG-CONF-05 Why should I use this extension?...
Unrestricted Upload of File with any dangerous extension
Description Unrestricted Upload of File with any extension Proof of Concept 1. Create a ticket 2. Upload a file with any dangerous extension 3. Intercept the request in Burp Suite, replace the Content-Type with image/jpeg POC video:...