Hackers deface Airport screens in Iran with anti-government messages

By Waqas On Thursday 24th May, the airport screens at Mashhad city in northeast This is a post from HackRead.com Read the original post: Hackers deface Airport screens in Iran with anti-government messages...

WePay: Reflected XSS in the IE 11 / Edge (latest versions) on the stage-go.wepay.com

Description Hello. I discovered Reflected XSS on the stage-go.wepay.com. Browsers & OS tested The XSS checked in the latest IE 11 and Edge on Windows 7. Not checked on Windows 10. POC IE 11 or Edge...

CommuniGatePro 6.1.16 Cross Site Scripting Vulnerability

CommuniGatePro version 6.1.16 suffers from multiple stored cross site scripting vulnerabilities. Exploit Title: CommuniGatePro webmails Multiple Stored XSS Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.stalker.com/ Software Link:...

CommuniGatePro 6.1.16 - Cross-Site Scripting

CommuniGatePro 6.1.16 - Cross-Site Scripting Exploit Title: CommuniGatePro webmails Multiple Stored XSS Date: 15/11/2017 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.stalker.com/ Software Link: http://www.stalker.com/ paid product Version: 6.1.16...

Turkish hackers deface Times of Israel website for Palestine

By Waqas The state of Israel is one of the places whose cyberinfrastructure This is a post from HackRead.com Read the original post: Turkish hackers deface Times of Israel website for Palestine...

Unikrn: Persistent XSS found on bin.pinion.gg due to outdated FlowPlayer SWF file with Remote File Inclusion vulnerability.

Description Hi. Today i looked to some outscope subdomains .pinion.gg for recon purposes. I discovered an interesting file on http://templ4d2.pinion.gg/motd2.manifest with next content: CACHE MANIFEST 2014-07-07 CACHE: http://bin.pinion.gg/bin/companions.min.js...

Quick CMS 6.1 Cross Site Request Forgery / Cross Site Scripting

-------------------------- - Exploit Title : Quick CMS CSRF/XSS - Vendor Homepage: http://opensolution.org - Software Link: - http://opensolution.org/download/home.html?sFile=Quick.Cmsv6.1-en.zip - Version : 6.1 - Date: 2016-21-01 - Tested On : Windows 7 / FireFox -------------------------- -...

xcv Deface Maker Tool

XCV Deface Maker is a computer program that allows users to create HTML pages, in order to upload them to web servers and deface them. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...

xMid Deface Page Creator Tool

xMid Deface Page Creator is a computer program that allows users to create HTML pages, in order to upload them to web servers and deface them. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...

Advanced Deface Page Maker Tool

Advanced Deface Page Maker is a computer program that allows users to create HTML pages, in order to upload them to web servers and deface them. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...

DNN(DotNetNuke®) Ribbon Bar Control Panel Bad Access Level config

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : DNNDotNetNuke® Ribbon Bar Control Panel Bad Access Level config Author : alieye vendor : http://dnnsoftware.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl:ctl/+inurl:/tab inurl:ctl+inurl:tab Model...

LiveWorld Multiple Products - Cross Site Scripting

LiveWorld Cross Site Scripting Vendor: LiveWorld, Inc Product: LiveWorld Version: Multiple Products Website: http://www.liveworld.com CVE: CVE-2004-2566 OSVDB: 9180 PACKETSTORM: 34143 Description: LiveWorld provides collaborative services for online meetings, customer care, and loyalty marketing...

CMSimple - CSRF Vulnerability

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-18-cmsimple-xsrf-vulnerability/ ''' - Title : CMSimple XSRF Vulnerability - Affected Version :CMSimple =3.2...

JaxUltraBB <= 2.0 (delete.php) Remote Auto Deface Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...

NASA website Hacked; Protest by Hackers against US action on Syria and Brazil Spying

Earlier reports based on Snowden's documents revealed the existence of the NSA's PRISM program, and indicate that the National Security Agency spied on Brazilians. On other End, President Obama said that the Syrian government used chemical weapons on its citizens and The United States may have to...

NASA website Hacked; Protest by Hackers against US action on Syria and Brazil Spying

Earlier reports based on Snowden's documents revealed the existence of the NSA's PRISM program, and indicate that the National Security Agency spied on Brazilians. On other End, President Obama said that the Syrian government used chemical weapons on its citizens and The United States may have to...

Advanced Guestbook 2.4.3 Shell Upload

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | + Exploit Title:Guestbook Remote Shell Upload Vulnerability | + Google Dork:site:.com.tw inurl:"addentry.php" | + Google Dork2:"Advanced Guestbook 2.4.3" | + Exploit...

WHMCS CSRF All Versions Vulnerability

Exploit for php platform in category web applications Exploit Title: WHMCS CSRF All Versions 0day Team: MaDLeeTs Software Link: http://www.whmcs.com Version: All Site: http://www.MaDLeeTs.com Email: email protected Video http://vimeo.com/63686629 https://TARGETS...

MLS Property Finder Improper Access Control

=========================================================== MLS Property Finder Improper Access Control Vulnerability =========================================================== :----------------------------------------------------------------------------------------------------------------------...

UNESCO Etxea website hacked by #NullCrew

Hacking group NullCrew deface UNESCO Etxea website unescoetxea.org, which is an internationally oriented NGOs working for the culture of peace, sustainable human development and human rights, at local and global levels. Deface page reads, "Welcome to the new front page of unesco etxea You have be...