Gratipay: Sub Domain Take over

Dear Team, I find bug in https://gratipay.piwik.pro/ i can take over account https://gratipay.piwik.pro/ I share with you setup 1 https://gratipay.piwik.pro/ 2 Then i see msg like this "THIS SUBDOMAIN IS AVAILABLE! gratipay.piwik.pro is available! Use this subdomain for your Piwik Cloud service. ...

X (Formerly Twitter): Insufficient OAuth callback validation which leads to Periscope account takeover

Hi, I would like to report an issue in the Periscope Twitter application which allows attacker to circumvent the callback locking to takeover victim's Periscope account which is connected to a Twitter account. Detail In the mobile Periscope app, the consumerkey and consumersecret for Twitter...

Ubiquiti Inc.: Subdomain Takeover in http://assets.goubiquiti.com/

Hi there, Its urgent issue about your subdomain http://assets.goubiquiti.com pointing to AWS S3 but no such website configuration is made. This unused subdomain can claim by anyone and fully take over it. An attacker can fully takeover this subdomain and do whatever he wants. this can cause huge...

Stanford Cross Site Scripting

/ Exploit Title: Stanford CGI Cross Site Scripting Vulnerability Exploit Author: Sha4yan Vendor Homepage : http://cgi.stanford.edu/ Google Dork: none Date: 2016-01-08 Tested on: Ubuntu / Mozila Firefox Exploit Code: Location & Vulnerable query:...

AVG WebTuneUp Cross Site Scripting

Exploit Title: AVG Subdomain XSS Vulnerability Google Dork: N/A Date: 2015/12/29 Exploit Author: RootByte Vendor Homepage: http://webtuneup.avg.com/ Software Link: N/A Version: N/A Tested on: Windows 10 / FireFox CVE : N/A Vulnerable Location:...

NASA Cross Site Scripting

Exploit Title : NASA Subdomain XSS Vulnerability Exploit Author : 4TT4CK3R Date : 2015/12/27 Tested on : Kali linux , Windows 8.1 Vendor HomePage : https://ghrc.nsstc.nasa.gov/ Google Dork : No Category : Web Application : Vulnerable Location :https://ghrc.nsstc.nasa.gov/hydro/search.pl : Using...

Cloudflare: Clickjacking : https://partners.cloudflare.com/

Hey, The title of submission defines the issue very clearly which is clickjacking at https://partners.cloudflare.com/ this subdomain missing x frame headers. As this subdomain contain a partner login then it is dangerous to have this type of issue. You understand better what i mean ; Attached a...

UBUNTU-CVE-2015-6785

The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a .x.y pattern, which might allow remote attackers to bypass intended access restrictions...

Urban Dictionary: URGENT - Subdomain Takeover in support.urbandictionary.com pointing to Zendesk

Hi. I found out that one of your subdomain which is http://support.urbandictionary.com/ can be taken over or is vulnerable to subdomain takeover. If youre gonna visit the site... you will see saying: No help desk at support.urbandictionary.com There is no help desk configured at this address. Thi...

chromium-browser: Wildcard matching issue in CSP

The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a .x.y pattern, which might allow remote attackers to bypass intended access restrictions...

libipa_hbac, libsss_idmap, libsss_nss_idmap, libsss_simpleifp, python, sssd security update

CentOS Errata and Security Advisory CESA-2015:2355 Updated sssd packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability...

X (Formerly Twitter): Subdomain Expired

Vulnerable domain: mopub.com Vulnerable SUB-domain: http://tool.mopub.com your subdomain http://tool.mopub.com which is pointing to hosted-by.myinternetservices.com and service is expirted at myinternetservices.com Remove this entry otherwise attacker can use this one. thanks...

HackerOne: HTTP header injection in info.hackerone.com allows setting cookies for hackerone.com

The subdomain info.hackerone.com is vulnerable to HTTP header injection. I'm aware that you are only interested in critical issues affecting this subdomain. However, you may be interested in this issue as a vulnerability in this domain may affect the domain hackerone.com. The vulnerability is a...

WePay: Subdomain Takeover in http://staging.wepay.com/ pointing to Fastly

Hi. One of your subdomain http://staging.wepay.com/ is vulnerable to subdomain takeover. Since if you visit the site, it will be saying "unknown domain" which indicates that there are no currently deployed services set up with the specified domain and attackers can copy that domain in any hosting...

eBay Fixes XSS Flaw in Subdomain

There was a cross-site scripting vulnerability in an eBay domain that could have allowed an attacker to steal users’ session cookies and take over their accounts. The company has removed the vulnerable page, according to the researcher who discovered the bug and disclosed it to eBay, Aditya Sood...

SubDomain Analyzer - Get detailed information of a domain

The "SubDomain Analyzer" tool written in Python language. The purpose of "SubDomain Analyzer" getting full detailed information of selected domain. The "SubDomain Analyzer" gets data from domain by following steps: 1. Trying to get the zone tranfer file. 2. Gathers all information from DNS record...

Salesforce Patches XSS on a Sub-Domain

Salesforce.com has patched a vulnerability on one of its subdomains that exposed users to account takeover, phishing attacks and the installation of malicious code. The vulnerability was disclosed yesterday by researcher Aditya K. Sood of Elastica Cloud Threat Labs. Sood said admin.salesforce.com...

Acunetix Web Vulnerability Scanner 9.5 - Crash PoC Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python Title : Acunetix Web Vulnerability Scanner 9.5 - Crash Proof Of Concept Website : https://www.acunetix.com Tested : win 7 / win 8.1 / win vista Author : Hadi Zomorodi Monavar Email : email protected 1 . run python code : pyth...

Acunetix Web Vulnerability Scanner 9.5 - Crash (PoC)

!/usr/bin/env python Title : Acunetix Web Vulnerability Scanner 9.5 - Crash Proof Of Concept Website : https://www.acunetix.com Tested : win 7 / win 8.1 / win vista Author : Hadi Zomorodi Monavar Email : [email protected] 1 . run python code : python poc.py 2 . open hadi.txt and copy content...

Nikto2 - Web Server Scanner

Nikto is an Open Source GPL web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. It also checks...