Exploit Collector
Bludit 3.13.1 Cross Site Scripting

https://3.bp.blogspot.com/-SgyDIXUTMbc/WWlu_miSAcI/AAAAAAAAIKE/fKFdSswhFNIqExJ_09QJseTEI_nz_ynRACLcBGAs/s1600/h119.png
Bludit version 3.13.1 suffers from a cross site scripting vulnerability.

MD5 | 4d0ca46cfd28793816da307e829df8fc

Download
# Exploit Title: Bludit 3.13.1 - 'username' Cross Site Scripting (XSS)
# Date: 19/10/2021
# Exploit Author: Vasu (tamilan_mkv)
# Vendor Homepage: https://www.bludit.com
# Software Link: https://www.bludit.com/releases/bludit-3-13-1.zip
# Version: bludit-3-13-1
# Tested on: kali linux
# CVE : CVE-2021-35323

### Steps to reproduce

1. Open login page http://localhost:800/admin/login;
2. Enter the username place ``admin">x ``and enter the password
3. Trigger the malicious javascript code


Source:packetstormsecurity.com

The tale of CVE-2021–34479 (VSCode XSS)
https://medium.com/techiepedia/the-tale-of-cve-2021-34479-vscode-xss-b336ba6cf3d6?source=rss------bug_bounty-5

This April, I finally decided to take some time to study the Electron framework and the security considerations around it. After learning…Continue reading on Techiepedia » (https://medium.com/techiepedia/the-tale-of-cve-2021-34479-vscode-xss-b336ba6cf3d6?source=rss------bug_bounty-5)

Ffuf TryHackMe Part-2
https://mukibas37.medium.com/ffuf-tryhackme-part-2-df819e663d02?source=rss------bug_bounty-5

WriteupContinue reading on Medium » (https://mukibas37.medium.com/ffuf-tryhackme-part-2-df819e663d02?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Belarus Linked to Big European Disinformation Campaign

EU officials and others previously had blamed Russia's intelligence operations for the so-called Ghostwriter campaign.

Dark Reading: Attacks/Breaches
How to Navigate the Mitigation of Deepfakes

Deepfakes are already several steps ahead of the technology that can detect and warn us about them.

Dark Reading: Attacks/Breaches
Is XDR Overhyped?

Security experts weigh in on the value and pitfalls of extended detection and response (XDR), offering consideration and advice on this growing new category.

Dark Reading: Attacks/Breaches
5 Things ML Teams Should Know About Privacy and the GDPR

Machine learning delivers plenty of benefits. But as the emerging technology gets applied more broadly, be careful about how you handle all the data used in the process.

Ffuf TryHackMe Part-2

WriteupContinue reading on Medium »
Read more...

Hacking on Medium
how to protect your phone from hackers | how to save your phone from hackers | by Allaboutsubha

how to protect your phone from hackers | how to save your phone from hackers | by Allaboutsubha

Continue reading on Medium »

Hacking on Medium
My experience with the eCPPT Exam

https://cdn-images-1.medium.com/max/712/1*TqRkgtjrOLck18WlSGIjTw.png
Important: This is my personal experience and review for the eCPPT exam from eLearnSecurity. If you like to check more information about…

Continue reading on Medium »

Hacking on Medium
EE.UU., Reino Unido y Australia advierten sobre piratas informáticos iraníes que explotan fallas de…

https://cdn-images-1.medium.com/max/1515/0*060ZSwjunfut_Z97
PUBLICADO EN 17 NOVIEMBRE, 2021 POR EHACKING

Continue reading on Medium »

Hacking on Medium
SharkBot — A New Android Trojan Stealing Banking and Cryptocurrency Accounts

https://cdn-images-1.medium.com/max/1200/0*6uXbkOgsKPsdKkmD
Since late October 2021, new Android Trojan named SharkBot is affecting multiple android devices in 24 countries including US.

Continue reading on Medium »

Hacking on Medium
Millionaire Financial Life Hacks # 2

https://cdn-images-1.medium.com/max/2600/0*QACUGO-Q2nO8-pa3
4 Reasons Why I Buy Used Tires.

Continue reading on Medium »