Dark Reading: Attacks/Breaches
Multicloud Security Challenges Will Persist in 2023

Some predictions about impending security challenges, with a few tips for proactively addressing them.

Dark Reading: Attacks/Breaches
Cybersecurity Budgets Increase for Retail & Hospitality Industry

Despite economic headwinds and layoffs in other areas, most retail and hospitality CISOs expect to add staff in 2023, according to a new report.

Dark Reading: Attacks/Breaches
BlackBerry's Inaugural Quarterly Threat Intelligence Report Reveals Threat Actors Launch One Malicious Threat Every Minute

Report identifies 1.75m cyberattacks were stopped by BlackBerry in the last 90 days.

Exploit Collector
Inout Jobs Portal 2.2.2 Cross Site Scripting

https://2.bp.blogspot.com/-MVgbYjy2n8E/WWlvDeDSliI/AAAAAAAAIK0/xNViOH31E8QoNbofn2xwVueZLLEvjlYYACLcBGAs/s1600/h130.png
Inout Jobs Portal version 2.2.2 suffers from a cross site scripting vulnerability.

SHA-256 | 6f3be2d31feb3d9c7a0c800ce5810ede460356e4aec96ec7e16f05115241db1a

Download
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
││ C r a C k E r ┌┘
┌┘ T H E C R A C K O F E T E R N A L M I G H T ││
└───────────────────────────────────────────────────────────────────────────────────────┘┘

┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ [ Vulnerability ] ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
: Author : CraCkEr :
│ Website : inoutscripts.com │
│ Vendor : Inout Scripts - Nesote Technologies Private Limited │
│ Software : Inout Jobs Portal 2.2.2 │
│ Vuln Type: Reflected XSS │
│ Impact : Manipulate the content of the site │
│ │
│────────────────────────────────────────────────────────────────────────────────────────│
│ ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
: :
│ Release Notes: │
│ ═════════════ │
│ The attacker can send to victim a link containing a malicious URL in an email or │
│ instant message can perform a wide variety of actions, such as stealing the victim's │
│ session token or login credentials │
│ │
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘

Greets:

The_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL

CryptoJob (Twitter) twitter.com/CryptozJob

┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ © CraCkEr 2023 ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘

Path: /index.php
Method: GET

URL parameter 'page' is vulnerable to XSS

https://www.website.com/index.php?page=index%2findexyar11%3cimg%20src%3da%20onerror%3dalert(1)%3ex75a9
[-] Done

Source:packetstormsecurity.com

Deep Web
Hitman-Hiring Doctor: My Life Is ‘50 Shades on Steroids’

https://external-preview.redd.it/JIj3sDF7oRUiqDVigT8ldty3jJ9G-KFjJIRhld2hCmE.jpg?width=640&crop=smart&auto=webp&s=0fb003b5c80c2219c1eecb72fcca3eeef1ba13b0 submitted by /u/Deku-shrub
[link] [comments]

Dexalot HackenProof Bug Bounty

Dexalot ek non-custodial, decentralized cryptocurrency exchange hai jisme ek Central Limit Order Book capability hai. Avalanche dwara…Continue reading on Dexalot »
Read more...

hacking: security in practice
How to clone a student ID?

I want to make a second clone of a student ID so I can go in and out of my gf’s dorm whenever. The dorms open using a card swipe (magnetic strip I believe). Can someone point me to some hardware that can clone a magnetic strip and any other security features I should know about?

submitted by /u/Iittle_shit
[link] [comments]