linkedin.com Open Redirect vulnerability

Vulnerable URL: https://www.linkedin.com/lite/external-redirect?url=http%3A%2F%2Fxssposed.org=YKI5 Details: Description| Value ---|--- Patched:| Yes, at 10.10.2017 Latest check for patch:| 10.10.2017 08:10 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...

WordPress WP Ultimate Exporter 1.0 Cross Site Scripting

FULL DISCLOSURE Product : WP Ultimate Exporter Exploit Author : Rahul Pratap Singh Version : 1.0 Home page Link : https://wordpress.org/plugins/wp-ultimate-exporter/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 24/Feb/2016 XSS Vulnerability:...

ehire.com XSS vulnerability

Vulnerable URL: https://ehire.com/auth/linkedin/callback?jobId=863=accessdenieddescription=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=1bf7b0aa-8260-4e42-9c5c-ad8a87960231 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability...

actionmint.com XSS vulnerability

Vulnerable URL: https://www.actionmint.com/auth/linkedin/signupsuccess?error=accessdenieddescription=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=PIDyZDIQo5L2gepaoP7aUC76TVfTBuExoPBufKol Details: Description| Value ---|--- Patched:| Yes, at 17.12.2015 Latest check for patch:| 17.12.2015 19:09 GM...

linkedin.com Open Redirect vulnerability

Vulnerable URL: https://www.linkedin.com/redir/redirect?url=http%3A%2F%2Fxssposed%2Eorg=YKI5 Details: Description| Value ---|--- Patched:| Yes, at 25.09.2017 Latest check for patch:| 25.09.2017 11:39 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 14...

ECommerceMajor - (productdtl.php, prodid param) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : ECommerceMajor SQL Injection Vulnerability Exploit Author : Rahul Pratap Singh Date : 13/Dec/2015 Home page Link : https://github.com/xlinkerz/ecommerceMajor Website : 0x62626262.wordpress.com Linkedin :...

Social networking site LinkedIn（LinkedIn）repair help at the center of the XSS-vulnerability warning-the black bar safety net

LinkedIn developers in this week and fixed a stored cross site scripting vulnerabilities, a hacker use it in the LinkedIn help forum to spreadXSSworms. Science LinkedIn is committed to global professionals to provide a communication platform, and to help them do more with less, to play Director...

LinkedIn Cross Site Scripting

LinkedIn social network affected by Persistent Cross-Site Scripting vulnerabilityXSS patched in less than 3 hours ========================= I. VULNERABILITY ------------------------- LinkedIn social network is affected by Persistent Cross-Site Scripting stored XSS vulnerability. II. BACKGROUND...

LinkedIn Fixes Persistent XSS Vulnerability

Developers at LinkedIn fixed a persistent cross site scripting vulnerability in the social network this week that could have been exploited to spread a worm on the service’s help forums. It was a very a quick turnaround for the company according to the researcher, who said LinkedIn fixed the issu...

How Amazon Employee bought 'Google.com' Domain for Only $12 from Google

Difficult to believe this, as we hardly come across such news. But trust me, a person managed to buy no ordinary .com domain, but — Google.com and that too for one whole minute. Sanmay Ved, an ex-Google employee and current-Amazon employee, experienced something of a shock when he found that the...

Microsoft Windows HTA (HTML Application) - Remote Code Execution Exploit

Microsoft Windows HTA HTML Application remote code execution exploit that leverages MS14-064. !/usr/bin/php poc'."\n\n"; $reza = socketcreateAFINET, SOCKSTREAM, 0 or die'Failed to create socket!'; socketbind$reza, 0,$port; socketlisten$...

Tomabo MP4 Player 3.11.3 SEH Buffer Overflow

!/usr/bin/python Exploit Title: Tomabo MP4 Player 3.11.3 - .m3u SEH Buffer Overflow Date: 03/08/2015 Exploit Author: Saeid Atabaki E-Mail: bytecod3r gmail.com, saeid Nsecurity.org Linkedin: https://www.linkedin.com/in/saeidatabaki Vendor Homepage: http://tomabo.com/mp4-player/index.html Version:...

Tomabo MP4 Player 3.11.3 - '.m3u' Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: Tomabo MP4 Player 3.11.3 - .m3u SEH Buffer Overflow Date: 03/08/2015 Exploit Author: Saeid Atabaki E-Mail: bytecod3r gmail.com, saeid Nsecurity.org Linkedin: https://www.linkedin.com/in/saeidatabaki Vendor Homepage: http://tomabo.com/mp4-player/index.html Version:...

KMPlayer 3.9.x - .srt Crash PoC Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl -w Title : KMPlayer 3.9.x - Crash Proof Of Concept Company : http://www.kmplayer.com Tested : Windows 7 / Windows 8.1 Author : Peyman Motevalli Manesh Linkedin : https://ir.linkedin.com/in/peymanmotevalli E-Mail : meatPDPnetworkdot...

Havij - OLE Automation Array Remote Code Execution

!/usr/bin/php ?php Title : Havij OLE Automation Array Remote Code Execution Affected Versions: All Version Founder : ITSecTeam Tested on Windows 7 / Server 2008 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Websi...

Havij OLE Automation Array Remote Code Execution

!/usr/bin/php ?php Title : Havij OLE Automation Array Remote Code Execution Affected Versions: All Version Founder : ITSecTeam Tested on Windows 7 / Server 2008 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Websi...

linkedin.com XSS vulnerability

Vulnerable URL: https://www.linkedin.com/job/@brutelogic%3Cscript%3E$=%27XSSPOSED%27,alert%28$%29%3C%2fscript%3E-jobs/ Details: Description| Value ---|--- Patched:| Yes, at 08.05.2015 Latest check for patch:| 08.05.2015 17:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Whisper: Insecure Local Data Storage : Application stores data using a binary sqlite database

Android provides several options for developers to save persistent application data. The local DB should store data depending on whether the data should be private to your application or accessible to other applications and users. In any case, sensible data always have to be encrypted to avoid...

Samsung Patches Social Media Vulnerability in Millions of Devices

Samsung patched a vulnerability last month in SNS Provider, a popular application that manages other social media apps present in millions of its devices. If exploited the bug could have given attackers the ability to access to any personal information users stored on Facebook, LinkedIn and...

PhEmail - Automate Sending Phishing Emails

PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test. The main purpose of PhEmail is to send a bunch of phishing emails and prove who clicked on them without attempting to exploit the web browser or email...