271 matches found
Subrion CMS 4.2.1 - Stored Cross-Site Scripting Vulnerability
Exploit Title: Subrion CMS 4.2.1 - Stored Cross-Site Scripting XSS Exploit Author: Sinem Şahin Vendor Homepage: https://intelliants.com/ Version: 4.2.1 Tested on: Windows & XAMPP == Tutorial http://HOST/panel/fields/add 2- Write XSS Payload into the tooltip value of the field add page. 3- Press...
FlatCore CMS 2.1.1 Cross Site Scripting
Exploit Title: FlatCore CMS 2.1.1 -Stored Cross Site Scripting Date: 2020-09-24 Exploit Author: Sinem Şahin Vendor Homepage: https://flatcore.org/ Version: 2.1.1 Tested on: Windows & XAMPP == Tutorial http://HOST/install/index.php 2- Write XSS Payload into the username of the user account. 3- Pre...
FlatCore CMS 2.1.1 - Stored Cross-Site Scripting (XSS)
Exploit Title: FlatCore CMS 2.1.1 -Stored Cross Site Scripting Date: 2020-09-24 Exploit Author: Sinem Şahin Vendor Homepage: https://flatcore.org/ Version: 2.1.1 Tested on: Windows & XAMPP == Tutorial http://HOST/install/index.php 2- Write XSS Payload into the username of the user account. 3- Pre...
Python CGI Documentation Cross Site Scripting
Is there low hanging fruit for the following observation? The documentation of the python cgi module is vulnerable to XSS cross site scripting https://docs.python.org/3/library/cgi.html form = cgi.FieldStorage print"name:", form"name".value print"addr:", form"addr".value First result on google fo...
How to Remove Duplicate Lines in EmEditor (2023)
By Waqas If you use EmEditor, this user-friendly tutorial will explain how to remove duplicate lines in the popular EmEditor text editor software. This is a post from HackRead.com Read the original post: How to Remove Duplicate Lines in EmEditor 2023...
YouTube Tutorial Videos Spreading Vidar and Raccoon Malware
By Habiba Rashid The new campaign highlights the fact that downloading cracked software is bad news. This is a post from HackRead.com Read the original post: YouTube Tutorial Videos Spreading Vidar and Raccoon Malware...
MAL-2022-6105 Malicious code in shopify-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ca0d7adf46e97fc40f299218873d080af78bd72687e5af47a69027753afd8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in shopify-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ca0d7adf46e97fc40f299218873d080af78bd72687e5af47a69027753afd8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3678 Malicious code in hosted-checkout-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b28fec32c2291a635a7818b08faccb32ba2b20f87616d26a8cf6d0604884065d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in free-cash-app-money-tutorial-2022 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a050a4d2381a2c890fef7d2ab806be5a2a4ffbfe502097b8ae9a35ebe8cdf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3127 Malicious code in free-cash-app-money-tutorial-2022 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a050a4d2381a2c890fef7d2ab806be5a2a4ffbfe502097b8ae9a35ebe8cdf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4841 Malicious code in nft-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d7e830998822852cfdc7d65b1108670a8d9becc819e2c0b1a538c685569b98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-MQ8J-3H7H-P8G7 Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled
Impact This vulnerability allows a renderer with JS execution to obtain access to a new renderer process with nodeIntegrationInSubFrames enabled which in turn allows effective access to ipcRenderer. Please note the misleadingly named nodeIntegrationInSubFrames option does not implicitly grant...
Spring Tips: Learn Spring for GraphQL (parts 3 and 4 of an ongoing series)
Hi, Spring fans! In thi^^^ these installments, we continue our series introducing the Spring for GraphQL project. This series features Spring for GraphQL lead Rossen Stoyanchev @rstoya05 - whose work you may know from basically everything in the wide and wonderful world of Springdom having to do...
Malicious code in zilliqa-exchange-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abfd66f13f5f9c577c71376fac31dab474c4661aa755ac57e48cff489861cbb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7389 Malicious code in zilliqa-exchange-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abfd66f13f5f9c577c71376fac31dab474c4661aa755ac57e48cff489861cbb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Tutorial: How to Build Your First Node.js gRPC API
Compared to other API technologies like REST and GraphQL, gRPC is lightweight and exceptionally robust, thanks in large part to its use of protobufs. Interested in exploring how to build your own API? Read on to see how easy it is to do so with Node.js and gRPC...
salentocasemare.it Cross Site Scripting vulnerability OBB-2454139
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ASSAMEE - Free Advance Encryptor For Anon Cloud
ASSAMEE is a free Advance encryptor for Anonfiles. It uses an advanced encryption method to encrypt the directory with AES-256. The data will store on anonfiles.com in an encrypted format. The ASSAMEE requires a download ID to download and decrypt the data from Anonfiles. Downloading encrypted da...
CVE-2021-40909
Cross site scripting XSS vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the firstname, lastname, and email parameters to /ajaxcrud...