245 matches found
Apple macOS 10.13 - 'workq_kernreturn' Denial of Service (PoC)
/ Exploit Title: MacOS 10.13 - 'workqkernreturn' Denial of Service PoC Date: 2018-07-30 Exploit Author: Fabiano Anemone Vendor Homepage: https://www.apple.com/ Version: iOS 11.4.1 / MacOS 10.13.6 Tested on: iOS / MacOS CVE: Not assigned Tweet: https://twitter.com/anoane/status/1048549170217451520...
How Trump Could Trigger Armageddon With a Tweet
Times have changed. The president is being held in check by terrified aides who are trying to keep his worst impulses in check. But disaster may only be a tweet away. Here's how it could happen...
adamslocksmithlakeforest.info XSS vulnerability
Open Bug Bounty ID: OBB-663179 Description| Value ---|--- Affected Website:| adamslocksmithlakeforest.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WordPress TwitterCart plugin <= 2.0 - Tweet Sending Vulnerability
WordPress TwitterCart plugin Tweet Sending Vulnerability was found in the function simpletweet. There's no capability check so this bug allows an attacker to send a tweet to send one they didn’t intended to. Solution Update the plugin...
Keychain vulnerability in macOS
On Monday, Patrick Wardle, a respected security researcher at Synack and owner of Objective-See, sent a tweet about a keychain vulnerability he had found in macOS High Sierra. As his tweet showed, it is possible for a malicious app to extract, and then exfiltrate, keychain data from High Sierra,...
See how I found Twitter any accounts to send tweets vulnerabilities and get 7560 $ Bounty-vulnerability warning-the black bar safety net
! Participation in the Twitter vulnerability Bounty project in the process, I passed some Safety tests found that a Twitter presence of significant vulnerabilities: an attacker does not need access to others account permissions, you can order any accounts to publish tweets. I'm in 2017 2 May 26,...
CVE-2017-1274
IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker to execute arbitrary code by specifying a large mailbox name. IBM X-Force ID: 124749. Recent assessments: gwillcox-r7 at November 22, 2020 3:09am UTC reported: Reported...
Tweet Followers - External URLs, Suspicious files, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Tweet Followers published at the 'play' market has multiple vulnerabilities...
Anonymous Hacktivist 'Barrett Brown' Released From Prison
Barrett Brown, a journalist, formerly served as an unofficial spokesman for the hacktivist collective Anonymous, finally walked free from prison on Tuesday morning after serving more than four years behind bars. The Dallas-born investigative journalist was arrested in 2012 from his home while he...
web-nile.com XSS vulnerability
Vulnerable URL: http://www.web-nile.com/tweet/twittertimeline.php?callback=prompt/OPENBUGBOUNTY/...
WordPress Tweet-Wheel 1.0.3.2 Cross Site Scripting
FULL DISCLOSURE Product :Tweet-wheel Exploit Author : Rahul Pratap Singh Version :1.0.3.2 Home page Link : https://wordpress.org/plugins/tweet-wheel/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 21/4/2016 XSS Vulnerability:...
Tweet Wheel <= 1.0.3.2 - Reflected Cross-Site Scripting (XSS)
The Tweet Wheel WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...
WordPress Tweet Wheel Plugin <= 1.0.3.2 - Reflected Cross Site Scripting
This plugin is prone to a reflected cross site scripting vulnerability, because "consumerkey", "consumersecret,accesstoken", "accesstokensecret" parameters are not sanitized. Solution Update the plugin...
X (Formerly Twitter): DOMXSS in Tweetdeck
Hi, I would like to report a DOMXSS issue in TweetDeck. Details In Tweetdeck, a tweet contains info of what client app the user used to sent the tweet. The render process is vulnerable to DOMXSS. In https://ton.twimg.com/tweetdeck-web/web/dist/bundle.6f91b4e832.js, the following line is responsib...
X (Formerly Twitter): Tweet Deck XSS- Persistent- Group DM name
Hello Group names in tweetdeck.twitter.com aren't filtered properly, giving scope for Cross site vulnerability attacks. Challenge I have faced while escalating the xss: - group name can only be 9 character long. How i bypassed it: Set multiple group names with different payloads, which means we c...
Tweet Nest 0.8 Open Redirect
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...
Shopify: XSS in creating tweets
Hi, I found an XSS while tweeting my product. To reproduce: Create new tweet. Select any product. Input in message content " XSS executes. Hit Publish. XSS also executes. Cheers!...
WordPress SecureMoz Security Audit Plugin Has Unspecified Vulnerability
WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation, which supports the hosting of personal blogging sites on servers running PHP and MySQL.SecureMoz Security Audit is one of the security audits which provides more than 27 ways to protect...
X (Formerly Twitter): XSS in original referrer after follow
Hey hi, There is a XSS in the intent functionality , Steps to reproduce ======================= 1 copy paste the following Link https://twitter.com/intent/favorite/complete?tweetid=572435913768366080&alreadyfavorited=false&originalreferer=javascript:alert%281%29; 2 Click follow 3 now click return...