Exploit Collector
Gadget Works Online Ordering System 1.0 Cross Site Scripting

https://1.bp.blogspot.com/-_z3KH6wgATQ/WWlvetqx6oI/AAAAAAAAIP0/wJ_a-RmXRcUnD9obiJAgo7XfY0pS1AZPwCLcBGAs/s1600/h82.png
Gadget Works Online Ordering System version 1.0 suffers from a persistent cross site scripting vulnerability.

MD5 | e4bfcff3637affdf8aaf64f77b30538d

Download
# Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting (XSS)
# Date: 24-05-2021
# Exploit Author: Vinay H C
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/php/13093/gadget-works-online-ordering-system-phpmysqli.html
# Version: 1.0
# Tested on: Windows 10/XAMPP

Stored Cross-site scripting(XSS):
Stored XSS, also known as persistent XSS, is the more damaging of the two. It occurs when a malicious script is injected directly into a vulnerable web application.

Attack Vector :

This vulnerability can result in the attacker to inject the XSS payload in the add Category field of the page and each time any user will open the website, the XSS triggers and attacker can able to steal the cookie according to the crafted payload.

Vulnerable Parameters: +New==>Category input field.

Payload :

Vulnerable URL :
http://localhost/philosophy/admin/category/index.php?view=add

Steps To Reproduce :
1) Go to the admin Dashboard
2) Click on New and select Category..
3) Put Payload into the 'Add Category' parameter.
4) Click on Save.
5) XSS payload will be triggered.


Source:packetstormsecurity.com

Exploit Collector
WordPress Cookie Law Bar 1.2.1 Cross Site Scripting

https://3.bp.blogspot.com/-L1ywDwIvHnM/WWlvbqBqi6I/AAAAAAAAIPQ/e-y1sGxHKpMGeO7A8b-5LHWSXrbuRWhUwCLcBGAs/s1600/h73.png
WordPress Cookie Law Bar plugin version 1.2.1 suffers from a persistent cross site scripting vulnerability.

MD5 | 77834bde8a48524c03aaf85577842c66

Download
# Exploit Title: WordPress Plugin Cookie Law Bar 1.2.1 - 'clb_bar_msg' Stored Cross-Site Scripting (XSS)
# Date: 2021-05-24
# Exploit Author: Mesut Cetin
# Vendor Homepage: https://www.cookielawinfo.com/wordpress-plugin/
# Software Link: https://wordpress.org/plugins/cookie-law-bar/
# Version: 1.2.1
# Tested on: Ubuntu 16.04 LTS, Wordpress 5.7.2

# the "Bar Message" text field is vulnerable to stored XSS due to unsanitized user input
# an authenticated attacker can retrieve cookies / sensitive data of all Wordpress users

# proof of concept
# navigate to the settings of the Cookie Law Bar under

http://localhost/wp-admin/options-general.php?page=clb

# inject the payload: into the "Bar Message field" and save it

# browsing through the Wordpress pages shows the cookies

Source:packetstormsecurity.com

Exploit Collector
QT TIFF Processing Out-Of-Bounds Read

https://1.bp.blogspot.com/-nibhxYxL_dU/WWlvdqzVqgI/AAAAAAAAIPo/_mHlQijSxHEwrD5GdeVybD20bu3Iyyg_QCLcBGAs/s1600/h8.png
The QImageReader class can read out-of-bounds when converting a specially-crafted TIFF file into a QImage, where the TIFF tile length is inconsistent with the tile size. This could potentially allow an attacker to determine values in memory based of the QImage pixels, if QT is used to process untrusted images.

MD5 | 5ab17349daeac6651bf3ab6ee0c7fee9

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Web Pentesting for Beginners: Practising and Preventing OS command injection.

https://cdn-images-1.medium.com/max/1178/1*5RBIxOc6_BWKoSn-dADTyg.jpeg
Hello everyone, In this tutorial, we will practice Os command injection and discuss the prevention of OS command injection.

Continue reading on Medium »

Hacking on Medium
From one North Korean Hacking Group Comes Another

https://cdn-images-1.medium.com/max/1133/1*chelY6WmrLElS_cDIVCO5A.jpeg
How North Korean APT Kimsuky Is Evolving Its Tactics — Kelly Sheridan, Dark Reading, 5/7/2021

Continue reading on Hybrid Analyst »

Hacking on Medium
Future Cyber Attacks Will be Worse than Colonial Pipeline

https://cdn-images-1.medium.com/max/2600/0*ua8VPu40Or6p77kx
Five reasons coming cyber attacks will be more severe

Continue reading on Medium »

Hacking on Medium
How to Prepare your Business for the Next Colonial Pipeline

https://cdn-images-1.medium.com/max/2600/0*H6rBsi81crMqt9qA
The 4 actions you can take now

Continue reading on Medium »

Hacking on Medium
How to Hack Medical Devices

https://cdn-images-1.medium.com/max/1600/0*YVhWewmanQ-8VLtk
It’s Not That Hard

Continue reading on EnjoyTech Web »