Fake CAPTCHA websites hijack your clipboard to install information stealers

There are more and more sites that use a clipboard hijacker and instruct victims on how to infect their own machine. I realize that may sound like something trivial to steer clear from, but apparently it’s not because the social engineering behind it is pretty sophisticated. At first, these attac...

dev.warthunder.com XSS vulnerability

Vulnerable URL: http://dev.warthunder.com/rest/popular/1/stream/content?commentCreateEdge=1=1=false=false=1=1=1'%22%26%25prompt/OPENBUGBOUNTY/...