Sagemcom F@ST 3864 V2 Admin Password Disclosure

!/bin/bash Exploit Title: Sagemcom 3864 V2 get admin password Date 2015-08-15 Author: Cade Bull Software Link: null Tested on: Sagemcom F@ST 3864 V2 Version: 7.253.2F3864V2Optus The sagemcom modem does not authenticate users when requesting pages, only whilst posting forms the password.html page...

st-nn.su XSS vulnerability

Vulnerable URL: http://st-nn.su/sitesearch?a=0term=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 11.08.2015 Latest check for patch:| 11.08.2015 23:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

stcatherinesacademy.org XSS vulnerability

Vulnerable URL: http://www.stcatherinesacademy.org/about/video.aspx!prettyPhoto/0,%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 06.08.2015 Latest check for patch:| 06.08.2015 05:39 GMT Vulnerability type:| XSS Vulnerability status:|...

stmarysamarillo.com XSS vulnerability

Vulnerable URL: http://stmarysamarillo.com/search?query= Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18323191 Google Pagerank| 2 VIP website status:| N...

stpatrickinarmonk.org XSS vulnerability

Vulnerable URL: http://stpatrickinarmonk.org/search?query=%20%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

st-ignatius.org XSS vulnerability

Vulnerable URL: http://st-ignatius.org/search?query=%20%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

st-cecilia.org XSS vulnerability

Vulnerable URL: http://st-cecilia.org/search?query=%20%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

stjoesmarion.org XSS vulnerability

Vulnerable URL: http://stjoesmarion.org/search?query=%20%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

stpiusvchurch.com XSS vulnerability

Vulnerable URL: http://stpiusvchurch.com/search?query=%20%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

stmarysridgefield.org XSS vulnerability

Vulnerable URL: http://stmarysridgefield.org/search?query=%20%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

FBI Investigating Alleged Attack on Houston Astros

In one of the more bizarre alleged hacking stories to emerge recently, federal authorities are investigating whether employees of the St. Louis Cardinals hacked into systems belonging to the Houston Astros and got access to internal team conversations about players, trades, scouting reports, and...

POS Malware Nitlove Seen Dropped in Spam Campaign

Toss another strain of point-of-sale POS malware onto the growing heap discovered this year. The latest variant, a variant dubbed NitlovePOS, was spotted being dropped on victims who were compromised by a spam operation. Researchers with the firm FireEye were in the middle of tracking a campaign ...

Sagem F@st 3304-V2 - Telnet Crash (PoC)

Sagem F@st 3304-V2 - Telnet Crash PoC Title : Sagem F@st 3304-V2 Telnet Crash POC Vendor : http://www.sagemcom.com Severity : High Tested Router : Sagem F@st 3304-V2 3304-V1, other versions may also be affected Date : 2015-03-08 Author : Loudiyi Mohamed Contact : [email protected] Blog :...

Sagem F@st 3304-V2 - Telnet Crash (PoC)

Title : Sagem F@st 3304-V2 Telnet Crash POC Vendor : http://www.sagemcom.com Severity : High Tested Router : Sagem F@st 3304-V2 3304-V1, other versions may also be affected Date : 2015-03-08 Author : Loudiyi Mohamed Contact : [email protected] Blog :...

Sagem F@st 3304-V2 - Local File Inclusion

Sagem F@st 3304-V2 - Local File Inclusion Title : Sagem F@st 3304-V2 Directory Traversal Vulnerability Vendor : http://www.sagemcom.com Severity : High Tested Router : Sagem F@st 3304-V2 3304, other versions may also be affected Date : 2015-03-01 Author : Loudiyi Mohamed Contact :...

Sagem F@st 3304-V2 - Local File Inclusion

Title : Sagem F@st 3304-V2 Directory Traversal Vulnerability Vendor : http://www.sagemcom.com Severity : High Tested Router : Sagem F@st 3304-V2 3304, other versions may also be affected Date : 2015-03-01 Author : Loudiyi Mohamed Contact : [email protected] Blog :...

st-barths.com XSS vulnerability

Vulnerable URL: http://www.st-barths.com/fr/search.html?q=...

Anonymous Hackers Claim to Identify the Cop Who killed Mike Brown in Ferguson

Members of the international hacker collective Anonymous have claimed they have identified the Ferguson, Missouri law enforcement officer involved in the fatal shooting of Michael Brown, an unarmed teenager killed on Saturday, which sparked days of protest and raised racial tensions. The hacktivi...

stmaryshistory.org XSS vulnerability

Open Bug Bounty ID: OBB-47571 Description| Value ---|--- Affected Website:| stmaryshistory.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Sagem F@st 3304-V1 Denial Of Service

Title : Sagem F@st 3304-V1 denial of service Vulnerability Vendor Homepage : http://www.sagemcom.com Tested on : Firefox, Google Chrome Tested Router : Sagem F@st 3304-V1 Date : 2014-07-26 Author : Z3ro0ne Contact : [email protected] Facebook Page : https://www.facebook.com/Z3ro0ne...