Get XSS bug bounty with XSSfinder
2020-03-07
Introduction “Extended XSS Search” is based on initial ideas of XSSfinder. XSS is also called a Cross Site Scripting, it is a type of security vulnerability found in web application.Read More →
How to hack PayPal and steal other people’s money like a pro
2020-02-19
Researchers at cybersecurity firm Cybernews released a report detailing the finding of six vulnerabilities in the electronic payment system PayPal that, if exploited, would allow threat actors to carry outRead More →
Critical vulnerabilities in phpMyAdmin
2018-12-12
Admins of thousands of websites are waiting for the update launching According to reports of specialists in digital forensics from the International Institute of Cyber Security, the administrators ofRead More →
Vulnerabilities in DJI drone manufacturer
2018-11-10
Security bugs could expose details about drone owners Researchers at a cybersecurity and digital forensics firm identified a couple vulnerabilities in the website and apps of the popular drone manufacturerRead More →
Opsview publishes new vulnerabilities report
2018-09-05
The flaws could allow code execution Ethical hacking specialists have recently published a vulnerability report jointly with the enterprise systems monitoring software provider Opsview. The publication is related to five vulnerabilities in theRead More →
Critical vulnerabilities present in smart city systems
2018-08-10
Researchers have discovered countless zero-day vulnerabilities that can be used to disrupt critical systems Experts in enterprise network security from the International Institute of Cyber Security reported the finding ofRead More →
Stealing Amazon EC2 Keys via an XSS Vulnerability
2017-10-30
On a recent engagement, our testers were faced with a single page web application which was used to generate PDF documents. This web application contained a multi-step form that ultimatelyRead More →
SQL Injection & more via XSS in pgAdmin 4
2017-04-17
This is the story of how I found and exploited XSS (content injection) in the pgAdmin4 1.3 desktop client. (Before I get too much further if you use pgAdmin 4Read More →
Google Releases Two Chrome Extensions for XSS Discovery and Mitigation
2016-12-31
Google says it paid over $1.2 million just for XSS bugs. Google released two new tools called CSP Evaluator and CSP Mitigator that help security researchers identify weaknesses that areRead More →
How to hack Google FR by exploiting a cross-site scripting flaw
2016-09-14
The security expert Issam Rabhi (@issam_rabhi) has discovered a cross-site scripting vulnerability in Google France. The giant already fixed it. A security expert from French security outfit Sysdream, Issam RabhiRead More →
