1663 matches found
WordPress Instagram 1.1.0 Cross Site Scripting
Exploit Title : WordPress Instagram Plugin 1.1.0 Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/ Software Link : https://wordpress.org/plugins/instalinker/ Date: 2016/02/04 Version : 1.1.0 Vulnerable code : File Name: instalinker-admin-preview.php...
Liga Manager Online 4.0.2 Cross Site Scripting
Exploit Title : LMO 4.0.2 Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.liga-manager-online.de/homepage/ Google Dork : "LMO 4.0.2" inurl:"st=" Date: 2016/01/28 Version = 4.0.2 PoC: st=XSS Payload = 'PersianHack Team Demo :...
Spotify - CSRF & Privilege Escalation Vulnerability
Document Title: =============== Spotify - CSRF & Privilege Escalation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1691 Video: https://www.youtube.com/watch?v=4axUu5xUtjM Guest Article:...
Spotify - CSRF & Privilege Escalation Vulnerability
Document Title: =============== Spotify - CSRF & Privilege Escalation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1691 Video: https://www.youtube.com/watch?v=4axUu5xUtjM Guest Article:...
FBI Has Named Hacker allegedly responsible for The Fappening Leaks
Remember The Fappening incident? Took place in mid-2014, in the incident, anonymous hackers flooded the Internet with private photographs of major celebrities, including Jennifer Lawrence, Kim Kardashian, Kate Upton and Kirsten Dunst. The Fappening was the result of the hack of thousands of Apple...
Mike Mimoso and Chris Brook Discuss the OpenSSH Patch, the Silverlight Zero Day, and More
Mike Mimoso and Chris Brook discuss the week in news, including a critical flaw patched by OpenSSH, the curious tale behind a Silverlight zero day, and how to turn a hacked webcam into a backdoor. Download: newswrap01-08-16.mp3 Music by Chris Gonsalves...
Time Warner Cable Urges 320,000 Customers to Change Passwords
Roughly 320,000 Time Warner Cable customers are being told to change their email passwords this week after the company announced Wednesday that hackers may have gained access to them. The move comes after the F.B.I. notified the telecommunications giant that someone may have gained access to TWC...
PlayStation 4 Hacked to Run Linux
Hackers enjoy much playing with PlayStation and Xbox, rather than playing on them. And this time, they have done some crazy things with Sony's PlayStation gaming console. It appears that a console-hacking that goes by the name of Fail0verflow have managed to hack PlayStation 4 PS4 to run a Linux...
ATOMYMAXSITE 2.5 SQL Injection
Exploit Title : ATOMYMAXSITE 2.5 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.ibizz.nl/ Google Dork : "Power by : ATOMYMAXSITE 2.5" OR Powered by ATOMYMAXSITE 2.5 Date: 2015/12/24 Version : 2.5 Demo:...
ATOMYMAXSITE 2.5 Cross Site Scripting
Exploit Title : ATOMYMAXSITE CMS Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://maxtom.sytes.net/ Google Dork : "Power by : ATOMYMAXSITE 2.5" OR Powered by ATOMYMAXSITE 2.5 Date: 2015/12/23 Version = 2.5 Payload : "PersianHack Team Demo:...
gnCMS Remote PHP Code Execution Vulnerability
Exploit for php platform in category web applications Exploit Title : gnCMS Remote PHP Code Execution Exploit Author : Persian Hack Team Vendor Homepage : www.groupnet.gr Google Dork : "powered by gnCMS" Version : 1.0.1 Date: 2015/12/19 PoC: Vulnerable Paramter module= Demo:...
ThaiWebPlus CMS Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title : ThaiWebPlus CMS Cross Site Scripting Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://thaiwebplus.com Google Dork : Powered by ThaiWebPlus inurl:idrun= Date : 2015/12/12 Version : 1.0 1-1:Admin Page msg...
ASP Dynamika 2.5 Cross Site Scripting
Exploit Title : ASP Dynamika 2.5 Cross Site Scripting Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.dynamika.co.il/ Google Dork : "Powered By : Dynamika" Date : 2015/12/08 Version : 2.5 Vulnerable Paramter siteid= Bypass '"--alert0xa Demo:...
Property Castle 15 Cross Site Scripting
Exploit Title : Property Castle XSS Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.propertycastle.com/ Google Dork : intext:"Powered By Property Castle " inurl:linkid= OR inurl:"/cms/cms.php?linkid=" Date : 2015/12/06 Version : PC15 Vulnerable Paramter linkid= Bypas...
China — OPM Hack was not State-Sponsored; Blames Chinese Criminal Gangs
In the most surprising manner, the Chinese government said it arrested criminal hackers behind the massive cyber attack on US Office of Personnel Management OPM earlier this year, dismissing its involvement. Three months back, we reported that China arrested a handful of hackers within its border...
MyCustomers CMS 1.3.873 - SQL Injection
MyCustomers CMS 1.3.873 - SQL Injection Exploit Title : MyCustomers Cms Sql Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.iran-php.com/ Google Dork : "Powered By IranPHP" & inurl:/index.php?DPT=IP17 & "Powered+by+MyCustomers-1.3.873" Date: 2015/11/28...
MyCustomers Cms Sql Injection Vulnerability
Exploit for php platform in category web applications MyCustomers 1.3.873 SQL Injection Published Credit Risk 2015.11.29 Persian Hack Team Medium CWE CVE Local Remote CWE-89 N/A No Yes Dork: "Powered By IranPHP" & inurl:/index.php?DPT=IP17 & "Powered+by+MyCustomers-1.3.873" Exploit Title :...
MyCustomers CMS 1.3.873 - SQL Injection
Exploit Title : MyCustomers Cms Sql Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.iran-php.com/ Google Dork : "Powered By IranPHP" & inurl:/index.php?DPT=IP17 & "Powered+by+MyCustomers-1.3.873" Date: 2015/11/28 Version : 1.3 Vulnerable Paramter DPT= Demo:...
WEBONE 14 Cross Site Scripting
Exploit Title : WEBONE CMS XSS Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.webone.com.tw/ Google Dork : intext:"Power by WEBONE" inurl:pk= Tested On : Windows , Kali Linux Date: 2015/11/28 Demo:...
MyCustomers 1.3.873 SQL Injection
Exploit Title : MyCustomers Cms Sql Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.iran-php.com/ Google Dork : "Powered By IranPHP" & inurl:/index.php?DPT=IP17 & "Powered+by+MyCustomers-1.3.873" Date: 2015/11/28 Version : 1.3 Vulnerable Paramter DPT= Demo:...