843 matches found
Exploit for Code Injection in Voipmonitor
CVE-2021-30461 VOIP RCE Technical details https://ssd-disclos...
LinkedIn Oncall vulnerable to Cross-Site Scripting
LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar...
GHSA-RFW2-X9F8-2F6M LinkedIn Oncall vulnerable to Cross-Site Scripting
LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar...
CrossLinked - LinkedIn Enumeration Tool To Extract Valid Employee Names From An Organization Through Search Engine Scraping
CrossLinked is a LinkedIn enumeration tool that uses search engine scraping to collect valid employee names from a target organization. This technique provides accurate results without the use of API keys, credentials, or even accessing the site directly. Formats can then be applied in the comman...
Oh Look, LinkedIn Also Had 500M Users' Data Scraped
Plus: A bad Zoom bug, a billion-dollar cocaine bust, and more of the week's top security news...
2 scraped LinkedIn databases with 500m and 827m records sold online
By Waqas None of the databases contain LinkedIn users' passwords; the data in the records is enough for cybercriminals to carry out a number of attacks. This is a post from HackRead.com Read the original post: 2 scraped LinkedIn databases with 500m and 827m records sold online...
Data from 500M LinkedIn Users Posted for Sale Online
Personal data from more than 500 million LinkedIn users has been posted for sale online in yet another incident of threat actors scraping data from public profiles and slinging it online for potential cybercriminal misuse. Hackers posted an archive containing data they said includes LinkedIn IDs,...
Clario: Social media link hijack of team member [Linkedin] at https://mackeeper.com/team/
Steps To Reproduce: - Go to at https://mackeeper.com/team/ - You can see your team members photos - I have Hijacked social media link for member name as Mammon PPC Account who seems to be Manager - You can click on his photo and you will be redirected to My account on Linkedin here at...
Hackers Targeting professionals With 'more_eggs' Malware via LinkedIn Job Offers
A new spear-phishing campaign is targeting professionals on LinkedIn with weaponized job offers in an attempt to infect targets with a sophisticated backdoor trojan called "moreeggs." To increase the odds of success, the phishing lures take advantage of malicious ZIP archive files that have the...
Hackers Targeting professionals With 'more_eggs' Malware via LinkedIn Job Offers
A new spear-phishing campaign is targeting professionals on LinkedIn with weaponized job offers in an attempt to infect targets with a sophisticated backdoor trojan called "moreeggs." To increase the odds of success, the phishing lures take advantage of malicious ZIP archive files that have the...
Fake LinkedIn job offers scam spreading More_eggs backdoor
By Waqas According to researchers, threat actors are using zip files to trick LinkedIn users into executing the Moreeggs backdoor. This is a post from HackRead.com Read the original post: Fake LinkedIn job offers scam spreading Moreeggs backdoor...
LinkedIn Spear-Phishing Campaign Targets Job Hunters
A threat group called Golden Chickens is delivering the fileless backdoor moreeggs through a spear-phishing campaign targeting professionals on LinkedIn with fake job offers, according to researchers at eSentire. The phishing emails try to trick a victim into clicking on a malicious .ZIP file by...
Linkedin Oncall Cross-Site Scripting Vulnerability
Linkedin Oncall is the United States Linkedin company based on Python language can be used to manage the calendar planning platform of the building system. A security vulnerability exists in Linkedin Oncall versions 1.4.0 and earlier, which stems from the mishandling of the "No results found"...
Project iKy v2.7.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface
Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Installation Clone repository git clone https://gitlab.com/kennbroorg/iKy.git Install Backend Redis You must install Redis wget...
CVE-2021-26722
LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar...
CVE-2021-26722
LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar...
CVE-2021-26722
LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar...
Cross site scripting
LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar...
