UPDATE: Buscador Version 2.0

PenTestIT RSS Feed I briefly mentioned about Buscador in my previous post titled - List of Operating Systems for OSINT Open-Source Intelligence. A few days ago, an updated - Buscador Version 2.0 was made available by the author. This post is about the changes made in the latest version. What is...

List of Operating Systems for OSINT (Open-Source Intelligence)

PenTestIT RSS Feed All of you must be well versed with the term OSINT and it's meaning. Wikipedia defines OSINT as the data collected from publicly available sources to be used in an intelligence context. There are multiple sources and tools which help you find this information. A good example is...

buscador.recolecta.fecyt.es XSS vulnerability

Open Bug Bounty ID: OBB-651374 Description| Value ---|--- Affected Website:| buscador.recolecta.fecyt.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

deia.eus XSS vulnerability

Open Bug Bounty ID: OBB-622593 Description| Value ---|--- Affected Website:| deia.eus Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gitanos.org XSS vulnerability

Open Bug Bounty ID: OBB-583109 Description| Value ---|--- Affected Website:| gitanos.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

casanext.com XSS vulnerability

Vulnerable URL: http://www.casanext.com/si/index.php?seccion=Buscador"'--!...

ifixmac.com.mx XSS vulnerability

Vulnerable URL: http://ifixmac.com.mx/index.php?seccion=buscador=categoria=iPad"'--!...

barachbienesraices.com.mx XSS vulnerability

Vulnerable URL: http://www.barachbienesraices.com.mx/si/index.php?seccion=Buscador"'--!...

bienesraicesacapulco.net XSS vulnerability

Vulnerable URL: http://www.bienesraicesacapulco.net/si/index.php?seccion=Buscador"'--!...

Twitter OSINT Tool Tinfoleak

tinfoleak is an open-source tool within the OSINT Open Source Intelligence and SOCMINT Social Media Intelligence disciplines, that automates the extraction of information on Twitter and facilitates subsequent analysis for the generation of intelligence. Taking a user identifier, geographic...

Unfixed XSS vulnerability at www.lavozdigital.es

Security researcher s E t H - X-C3LL, has submitted on 15/02/2009 a cross-site-scripting XSS vulnerability affecting www.lavozdigital.es, which at the time of submission ranked 49667 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. I...

Unfixed XSS vulnerability at www.buenafuente.lasexta.com

Security researcher hades, has submitted on 29/07/2008 a cross-site-scripting XSS vulnerability affecting www.buenafuente.lasexta.com, which at the time of submission ranked 14140 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2009. It i...

PT-2007-6887 · Jlm · Jlmforo System

Name of the Vulnerable Software and Affected Versions: JLMForo System affected versions not specified Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the clave parameter in the buscador.php file. Recommendations: At the...

Fixed XSS vulnerability at www.buscadorcablevision.com.ar

Security researcher www.nullcode.com.ar, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting www.buscadorcablevision.com.ar, which at the time of submission ranked 86917 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CVE-2007-0922

Cross-site scripting XSS vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to inject arbitrary web script or HTML via the query string...