Exploit Collector
PHProjekt PhpSimplyGest / MyProjects 1.3.0 Cross Site Scripting

https://1.bp.blogspot.com/-_z3KH6wgATQ/WWlvetqx6oI/AAAAAAAAIP0/wJ_a-RmXRcUnD9obiJAgo7XfY0pS1AZPwCLcBGAs/s1600/h82.png
PHProjekt PhpSimplyGest and MyProjects version 1.3.0 suffer from a cross site scripting vulnerability.

SHA-256 | 683da3b4055369ad271be51cb81dbf94818591a437064ded4119628be26cc697

Download
# Exploit Title: PHProjekt (PhpSimplyGest / MyProjects, 1.3.0) - Stored XSS (Cross-Site Scripting)
# Date: 2022-05-05
# Exploit Author: Andrea Intilangelo
# Vendor Homepage: http://www.phprojekt.altervista.org (removed demo was at http://phprojekt.altervista.org/phpsimplygest130)
# Software Link: https://github.com/robyfofo/MyProjects (original PhpSimplyGest https://github.com/robyfofo/PhpSimplyGest now merged/renamed into MyProjects)
# Version: 1.3
# Tested on: Latest Version of Desktop Web Browsers (ATTOW: Firefox 100.0, Microsoft Edge 101.0.1210.32)
# CVE: CVE-2022-27308
Description:

A stored cross-site scripting (XSS) vulnerability in PHProjekt PhpSimplyGest v1.3.0 (and related products from same vendor, like "MyProjects") allows
attacker to execute arbitrary web scripts or HTML.

Injecting persistent javascript code inside the title description (or content) while creating a project, todo, timecard, estimates, report or finding,
it will be triggered once page gets loaded.
Steps to reproduce:

Click on Projects and add or edit an existing one,

Insert the following PoC inside the Title
Click on 'Send'.

If a user visits the website dashboard, as well as project summary page, the javascript code will be rendered.
Timeline:

2022-01-08: Vulnerability discovered.
2022-01-08: Vendor contacted.
2022-02-09: No reply, vendor contacted for 2nd time.
2022-02-18: Request for CVE reservation.
2022-04-27: Assigned CVE number 2022-27308.
2022-05-02: No reply, vendor contacted for 3rd time.
2022-05-05: Public disclosure.
PoC Screenshots:

https://imagebin.ca/v/6g5OFET1pyZB
https://imagebin.ca/v/6g6qLRC3X5ky
https://postimg.cc/qgc19rg0

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
ZoneMinder Language Settings Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
1,000+ Attacks in 2 Years: How the SideWinder APT Sheds Its Skin

Researcher to reveal fresh details at Black Hat Asia on a tenacious cyber-espionage group attacking specific military, law enforcement, aviation, and other entities in Central and South Asia.

Dark Reading: Attacks/Breaches
Multichannel Phishing Concerns Cybersecurity Leaders in 2022

With 80% of companies using cloud collaboration tools, cybercriminals are using multichannel phishing attacks to exploit security gaps in the hybrid work model.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cisco Announces Cloud Controls Framework Is Now Available to Public

The Cisco CCF helps save resources by enabling organizations to achieve cloud security certifications more efficiently.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Magnet Forensics Acquires Cybersecurity Software Firm Comae Technologies

The company will continue the development of Comae’s memory analysis platform and seek to incorporate its capabilities into existing solutions

___________________________
@hacking_Attack
@Hacking_Video

What's everyone's favorite phishing framework/tool?
https://www.reddit.com/r/redteamsec/comments/uj43zm/whats_everyones_favorite_phishing_frameworktool/

I think GoPhish is the most popular. I'm going to be playing around with as many as I find over the weekend. I wanted to get some feedback on any favorites you may have used; pros & cons; etc. Thanks in advance for any feedback! submitted by /u/offftherecordz (https://www.reddit.com/user/offftherecordz)
[link] (https://www.reddit.com/r/redteamsec/comments/uj43zm/whats_everyones_favorite_phishing_frameworktool/) [comments] (https://www.reddit.com/r/redteamsec/comments/uj43zm/whats_everyones_favorite_phishing_frameworktool/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Critical Cisco VM-Escape Bug Threatens Host Takeover

The vendor also disclosed two other security vulnerabilities that would allow remote, unauthenticated attackers to inject commands as root and snoop on sensitive user information.

Dark Reading: Attacks/Breaches
FBI: Bank Losses From BEC Attacks Top $43B

Law enforcement attributes a recent 65% spike in BEC attack losses to COVID-19 restrictions and the ongoing reality of a remote workforce.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is a good certification that will make you good at hacking?

I keep hearing people talk bad about the CEH certification, which I have. If that isn't good, what is a good certification?

submitted by /u/TheRealTengri
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

AMB Bridge: bug bounty program

As you may already know, we have recently launched the AMB bridge on the Ambrosus testnet!Continue reading on Ambrosus Ecosystem »
Read more...

AMB Bridge: bug bounty program
https://blog.ambrosus.io/amb-bridge-bug-bounty-program-a3a973f838ab?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

As you may already know, we have recently launched the AMB bridge on the Ambrosus testnet!Continue reading on Ambrosus Ecosystem » (https://blog.ambrosus.io/amb-bridge-bug-bounty-program-a3a973f838ab?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Malicious-Pdf - Generate A Bunch Of Malicious Pdf Files With Phone-Home Functionality
http://www.kitploit.com/2022/05/malicious-pdf-generate-bunch-of.html

___________________________
@hacking_Attack
@Hacking_Video

Generate ten different malicious pdf files with phone-home functionality. Can be used with Burp Collaborator (https://portswigger.net/burp/documentation/collaborator) or Interact.sh (https://github.com/projectdiscovery/interactsh) Used for penetration testing (https://www.kitploit.com/search/label/Penetration%20Testing) and/or red-teaming etc. I created this tool because i needed a third party tool to generate a bunch of PDF files with various links.
Usage python3 malicious-pdf.py burp-collaborator-url Output will be written as: test1.pdf, test2.pdf, test3.pdf etc in the current directory. Do not use the https:// etc prefix on the url argument. Purpose Test web pages/services accepting PDF-files Test security products Test PDF readers Test PDF converters Credits Insecure features in PDFs (https://web-in-security.blogspot.com/2021/01/insecure-features-in-pdfs.html) Burp Suite UploadScanner (https://github.com/modzero/mod0BurpUploadScanner/) Bad-Pdf (https://github.com/deepzec/Bad-Pdf) A Curious Exploration of Malicious PDF Documents (https://www.scitepress.org/Papers/2020/89923/89923.pdf) "Portable Document Flaws 101" talk at Black Hat USA 2020 (https://github.com/RUB-NDS/PDF101) Adobe Reader - PDF callback via XSLT stylesheet in XFA (https://insert-script.blogspot.com/2019/01/adobe-reader-pdf-callback-via-xslt.html) Foxit PDF Reader PoC, DoHyun Lee (https://twitter.com/l33d0hyun/status/1448342241647366152) Eicar test file by Stas Yakobov (https://github.com/fire1ce/eicar-standard-antivirus-test-files)

Download Malicious-Pdf (https://github.com/jonaslejon/malicious-pdf)

___________________________
@hacking_Attack
@Hacking_Video

Malicious-Pdf - Generate A Bunch Of Malicious Pdf Files With Phone-Home Functionality

Generate ten different malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh Used for penetration testing and/or red-teaming etc. I created this tool because i needed a third party tool to generate a bunch of PDF files with various links. Usage python3 malicious-pdf.py burp-collaborator-url Output will be written as: test1.pdf, test2.pdf, test3.pdf etc in the current directory. Do not use the https:// etc prefix on the url argument. Purpose Test web pages/services accepting PDF-files Test security products Test PDF readers Test PDF converters Credits Insecure features in PDFs Burp Suite UploadScanner Bad-Pdf A Curious Exploration of Malicious PDF Documents "Portable Document Flaws 101" talk at Black Hat USA 2020 Adobe Reader - PDF callback via XSLT stylesheet in XFA Foxit PDF Reader PoC, DoHyun Lee Eicar test file by Stas Yakobov Download Malicious-Pdf
Read more...