Exploit Collector
WordPress Cookie Law Bar 1.2.1 Cross Site Scripting

https://3.bp.blogspot.com/-L1ywDwIvHnM/WWlvbqBqi6I/AAAAAAAAIPQ/e-y1sGxHKpMGeO7A8b-5LHWSXrbuRWhUwCLcBGAs/s1600/h73.png
WordPress Cookie Law Bar plugin version 1.2.1 suffers from a persistent cross site scripting vulnerability.

MD5 | 77834bde8a48524c03aaf85577842c66

Download
# Exploit Title: WordPress Plugin Cookie Law Bar 1.2.1 - 'clb_bar_msg' Stored Cross-Site Scripting (XSS)
# Date: 2021-05-24
# Exploit Author: Mesut Cetin
# Vendor Homepage: https://www.cookielawinfo.com/wordpress-plugin/
# Software Link: https://wordpress.org/plugins/cookie-law-bar/
# Version: 1.2.1
# Tested on: Ubuntu 16.04 LTS, Wordpress 5.7.2

# the "Bar Message" text field is vulnerable to stored XSS due to unsanitized user input
# an authenticated attacker can retrieve cookies / sensitive data of all Wordpress users

# proof of concept
# navigate to the settings of the Cookie Law Bar under

http://localhost/wp-admin/options-general.php?page=clb

# inject the payload: into the "Bar Message field" and save it

# browsing through the Wordpress pages shows the cookies

Source:packetstormsecurity.com

Exploit Collector
QT TIFF Processing Out-Of-Bounds Read

https://1.bp.blogspot.com/-nibhxYxL_dU/WWlvdqzVqgI/AAAAAAAAIPo/_mHlQijSxHEwrD5GdeVybD20bu3Iyyg_QCLcBGAs/s1600/h8.png
The QImageReader class can read out-of-bounds when converting a specially-crafted TIFF file into a QImage, where the TIFF tile length is inconsistent with the tile size. This could potentially allow an attacker to determine values in memory based of the QImage pixels, if QT is used to process untrusted images.

MD5 | 5ab17349daeac6651bf3ab6ee0c7fee9

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Web Pentesting for Beginners: Practising and Preventing OS command injection.

https://cdn-images-1.medium.com/max/1178/1*5RBIxOc6_BWKoSn-dADTyg.jpeg
Hello everyone, In this tutorial, we will practice Os command injection and discuss the prevention of OS command injection.

Continue reading on Medium »

Hacking on Medium
From one North Korean Hacking Group Comes Another

https://cdn-images-1.medium.com/max/1133/1*chelY6WmrLElS_cDIVCO5A.jpeg
How North Korean APT Kimsuky Is Evolving Its Tactics — Kelly Sheridan, Dark Reading, 5/7/2021

Continue reading on Hybrid Analyst »

Hacking on Medium
Future Cyber Attacks Will be Worse than Colonial Pipeline

https://cdn-images-1.medium.com/max/2600/0*ua8VPu40Or6p77kx
Five reasons coming cyber attacks will be more severe

Continue reading on Medium »

Hacking on Medium
How to Prepare your Business for the Next Colonial Pipeline

https://cdn-images-1.medium.com/max/2600/0*H6rBsi81crMqt9qA
The 4 actions you can take now

Continue reading on Medium »

Hacking on Medium
How to Hack Medical Devices

https://cdn-images-1.medium.com/max/1600/0*YVhWewmanQ-8VLtk
It’s Not That Hard

Continue reading on EnjoyTech Web »

Hacking on Medium
Why Has Facebook No Obvious Customer Support For Business Page Theft?

https://cdn-images-1.medium.com/max/2600/1*JQ1RzSvjyGKW8VON5Dj17w.jpeg
There is a really simple solution

Continue reading on She Wordsmiths.. »

Hacking on Medium
Investigating Windows Try Hack me Room

https://cdn-images-1.medium.com/max/1234/0*qnIg2IcFXT7pGce5.png
A windows machine has been hacked, its your job to go investigate this windows machine and find clues to what the hacker might have done.

Continue reading on Medium »

Hacking on Medium
REvil / Sodinokibi malware: A case for better proactive cyber security

https://cdn-images-1.medium.com/max/1200/1*ye-viS6RqpOtYWVV7ri0lA.png
“An ounce of prevention is better than a pound of cure”.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ethical Hacking (part 1.0/20): Footprinting and Reconnaissance with examples and tools

https://cdn-images-1.medium.com/max/1920/1*AVhKZICqoNVxvZ_Pvm9adA.jpeg
Note: The main purpose of this series of articles is to introduce how cyber criminals work from the inside. Being aware of their tools and…

Continue reading on Medium »