CVE-2022–33077: IDOR to change address of any customer via parameter pollution in nopCommerce <= 4.5

TL;DR: A POST request to edit the address endpoint involved two addressID parameters (one in the URL and other in the request body)…Continue reading on Medium »
Read more...

Story about Escalation of HTML Injection to EC2 Instance credentials leak
https://medium.com/@Cybervenom/story-about-escalation-of-html-injection-to-ec2-instance-credentials-leak-e2cbd7343a83?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello all, Thank for overwhelming response here i am with my new finding tale.Continue reading on Medium » (https://medium.com/@Cybervenom/story-about-escalation-of-html-injection-to-ec2-instance-credentials-leak-e2cbd7343a83?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Top 10 Best Bug Bounty Tools in 2022
https://thenurhabib.medium.com/top-10-best-bug-bounty-tools-in-2022-a3d6a049f0fe?source=rss------bug_bounty-5

In today’s world, cybersecurity holds top priority for most organizations and governments. Large companies are investing millions of…Continue reading on Medium » (https://thenurhabib.medium.com/top-10-best-bug-bounty-tools-in-2022-a3d6a049f0fe?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

CVE-2022–33077: IDOR to change address of any customer via parameter pollution in nopCommerce <= 4.5
https://medium.com/@rohan_pagey/cve-2022-33077-idor-to-change-address-of-any-customer-via-parameter-pollution-in-nopcommerce-4-5-2fa4bc763cc6?source=rss------bug_bounty-5

TL;DR: A POST request to edit the address endpoint involved two addressID parameters (one in the URL and other in the request body)…Continue reading on Medium » (https://medium.com/@rohan_pagey/cve-2022-33077-idor-to-change-address-of-any-customer-via-parameter-pollution-in-nopcommerce-4-5-2fa4bc763cc6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Concerns Over Fortinet Flaw Mount; PoC Released, Exploit Activity Grows

The authentication bypass flaw in FortiOS, FortiProxy and FortiSwitchManager is easy to find and exploit, security experts say.

Dark Reading: Attacks/Breaches
Fast Fashion Retailer Data Breach Draws $1.9M Fine

New York AG fines Shein and Romwe parent company for failure to protect customer data and downplaying the 2018 compromise of 46 million shopper records.

Dark Reading: Attacks/Breaches
Microsoft 365 Message Encryption Can Leak Sensitive Info

The default email encryption used in Microsoft Office's cloud version is leaky, which the company acknowledged but said it wouldn't fix.

Dark Reading: Attacks/Breaches
Acuity Reports Increase in Cyber Liability Insurance Claims as Cybercrime Skyrockets

Acuity Insurance reports ongoing increased insurance risk for individuals and businesses.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is their a way or anyone working on adding quantum cryptography to the tor network

Quantum encryption is the future but https TCP encryption is broken and crackable the reality is the tor network is not secure because encryption is being broken with quantum computers Could any of these algorithms integrate into tor? I would also like to note it’s likely not smart to add government approved cryptography to the tor network but theoretically is it possible or being worked on? https://csrc.nist.gov/Projects/post-quantum-cryptography/post-quantum-cryptography-standardization/round-3-submissions

submitted by /u/Phantasius224
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 10 Best Bug Bounty Tools in 2022

In today’s world, cybersecurity holds top priority for most organizations and governments. Large companies are investing millions of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Реализуем Frey-Rück Attack чтобы получить секретный ключ “K” (NONCE)

https://cdn-images-1.medium.com/max/731/0*U7N3bnT99yfN7HI1.png
В этой статье мы реализуем эффективный алгоритм Frey-Rück Attack для подписи ECDSA в транзакции блокчейна Биткоина. В наших более ранних…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Research: Internet Anonymity Made Simple

https://cdn-images-1.medium.com/max/800/1*vtj82_e_k1d_D4li87fpWw.png
“You might not have anything to hide, but you have everything to protect”
 The Art of Invisibility by: Kevin Mitnick

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Using Python to Steal Browser Data Of Anybody

https://cdn-images-1.medium.com/max/1440/1*T0E67waEjyCP_I_-Hl7tSw.png
Gaining Access To Browser-Saved Data Of Anyone Using Python

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Break it Walkthrough

https://cdn-images-1.medium.com/max/940/1*agEDKhOwF9Ph3JelSgDv7Q.png
Break it TryHackMe tryhawriteup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

CVE-2022–41542 Session Mis-Configuration in Devhub Application

Session Misconfiguration is widely popular vulnerability.Continue reading on Medium »
Read more...