Exploit Collector
WordPress KN Fix Your Title 1.0.1 Cross Site Scripting

https://3.bp.blogspot.com/-sRAbWielMtM/WWlvVvmDA-I/AAAAAAAAIN8/PunzJUFKKskcHl_zTOrA6xP6ETTvhbejQCLcBGAs/s1600/h46.png
WordPress KN Fix Your Title plugin version 1.0.1 suffers from a cross site scripting vulnerability.

MD5 | 563d1383d6850947d9ba0854d82026d7

Download
# Exploit Title: WordPress Plugin KN Fix Your Title 1.0.1 - 'Separator' Stored Cross-Site Scripting (XSS)
# Date: 19/07/2021
# Exploit Author: Aakash Choudhary
# Software Link: https://wordpress.org/plugins/kn-fix-your/
# Version: 1.0.1
# Category: Web Application
# Tested on Mac

How to Reproduce this Vulnerability:

1. Install WordPress 5.7.2
2. Install and activate KN Fix Your Title
3. Navigate to Fix Title under Settings Tab >> Click on I have done this and enter the XSS payload into the Separator input field.
4. Click Save Changes.
5. You will observe that the payload successfully got stored into the database and when you are triggering the same functionality at that time JavaScript payload is executing successfully and we are getting a pop-up.
6. Payload Used: ">

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

HTML Injection To Free Ticket Cyber Security Event
https://alpinnnnnn13.medium.com/html-injection-to-free-ticket-cyber-security-event-da1806934f88?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone my name is Mohammad Alfin Hidayatullah, i am a junior bug hunter and i am from Indonesia.Continue reading on Medium » (https://alpinnnnnn13.medium.com/html-injection-to-free-ticket-cyber-security-event-da1806934f88?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Exploit_Mitigations : Knowledge Base Of Exploit Mitigations Available Across Numerous Operating Systems, Architectures And Applications And Versions

Exploit_Mitigations goal is to list mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the following: Supported Targets We currently support the following operating systems: Microsoft Windows Linux Google […]

The post Exploit_Mitigations : Knowledge Base Of Exploit Mitigations Available Across Numerous Operating Systems, Architectures And Applications And Versions appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Kali-Whoami : A Privacy Tool Developed To Keep You Anonymous On Kali Linux At The Highest Level

Kali-Whoami tool makes you as anonymous as possible on Kali linux. It is an user friendly with its ease of use and simple interface. It follows two different paths to ensure the highest possible level of anonymity. Finally, don’t forget that there is never a hundred percent security on the internet! Features Anti mitm Log […]

The post Kali-Whoami : A Privacy Tool Developed To Keep You Anonymous On Kali Linux At The Highest Level appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GOOGLE HACKING.

https://cdn-images-1.medium.com/max/910/1*tNS-SvuXblbfHcmQMU9AqQ.jpeg
O Google Hacking mais conhecido como dorking é uma forma de encontrar falhas e arquivos expostos. Ele é usado como uma ferramenta de busca…

Continue reading on Medium »

Hacking on Medium
A media consortium has discovered that the Israeli company's spyware is installed on phones around…

https://cdn-images-1.medium.com/max/2600/1*ir73SYHK8WGD-1IiLHZC9g.jpeg
Israeli company NSO Group's Pegasus spyware was used in successful attempts to hack 37 smartphones belonging to journalists, activists and…

Continue reading on Medium »

Hacking on Medium
Hacking the dlink DIR-615 for fun and no profit Part 2: CVE-2020–10215

https://cdn-images-1.medium.com/max/1702/1*L9QxsBwhbQNhIjyUJmQ0PA.png
Hi. This is my second writeup on my hacking the dlink dir-615 series as i try to get my first cve. I found more vulns and will also make a…

Continue reading on Medium »

Hacking on Medium
Simple ways to become an Ethical Hacker

A programmer is the person who looks into the PC security component and organization framework. There are various networks and shared…

Continue reading on Medium »

Hacking on Medium
India’s Perspective: Need of Ethical Hacker’s in India

The word programmer has consistently been related with a negative importance. In real “programmer’ is somebody who can assemble stuff and…

Continue reading on Medium »