Harvard Carr Center for Human Rights Policy Hacked, Password was "DOG" ?

Harvard's Carr Center for Human Rights Policy website www.hks.harvard.edu/cchrp/ was hacked last week and then silently fixed by the administrator without giving Reply/Credit to the Whitehat Hacker who reported the vulnerability. The Hack incident was performed in 3 Phases as described below: Pha...

XSS vulnerability reported in Yahoo subdomain website

XSS vulnerability reported in Yahoo subdomain website Vansh Sharma & Vaibhuv Sharma from India Reported another important Cross site scripting XSS vulnerability in Yahoo subdomain as shown. Vulnerable Link : Cross-site scripting XSS is a type of computer security vulnerability typically found in...

XSS Vulnerability in Google Code site

XSS Cross site Scripting Vulnerability discovered on Google Code website as shown. Claimed to be Discovered by Vansh Sharma & Vaibhuv Sharma. Proof Of Concept: Just go to https://code.google.com/apis/ajax/playground/ and then click on edit HTML after that remove all the codes and type this script...

XSS Vulnerability in Google Code site

XSS Cross site Scripting Vulnerability discovered on Google Code website as shown. Claimed to be Discovered by Vansh Sharma & Vaibhuv Sharma. Proof Of Concept: Just go to and then click on edit HTML after that remove all the codes and type this script: img src="img src=search"/onerror=alert"XSS"/...

XSS Vulnerability on AOL Energy website

XSS Vulnerability on AOL Energy website A non-persistent Cross Site Scripting XSS vulnerability discovered on AOL Energy%3C%2Fscript%3E website. The similar Vulnerability is claimed by few other guys on some forums too. No clue that who found it first, But THN got update from Vansh & Vaibhuv from...

XSS Vulnerability in Interactive YouTube API Demo Beta

XSS Vulnerability in Interactive YouTube API Demo Beta There is a Critical Cross site XSS Vulnerability in Interactive YouTube API Demo Beta, Discovered by various sources. One of the White Hat Hacker "Vansh Sharma" Inform us about this XSS Vulnerability with proof of concept. Proof Of Concept :...