Linux – OS Unix – Security evangelist, security addict, a man who humbly participating in knowledge. Security is for everyone everywhere. Information shared to be used for LEGAL purposes only!

Advertroindia Cross Site Scripting 01/06/2020
Topic: Advertroindia Cross Site Scripting Risk: Low Text:# Exploit Title : Advertroindia - Cross Site Scripting # Author : Xmall75 # Vendor Homepage : www.advertroindia.co.in # Date...
Xmall75
Webtala Blind SQL İnjection ( Domain Kayıt ) 01/06/2020
Topic: Webtala Blind SQL İnjection ( Domain Kayıt ) Risk: Low Text:# Tested On : Kali Linux # Contact : instagram.com/rootayyildiz/ benden herkeze hediye olsun dns kayıtları değiştirile ...
RootAyyıldız Turkish Defacer
Zoom Web Media - Admin Login bypass 01/06/2020
Topic: Zoom Web Media - Admin Login bypass Risk: Medium Text:[+] Title : Zoom Web Media - Admin Login bypass [+] Date : 2020/6/1 [+] Exploit Author :...
nginxDEX
PanaceaSoft products Arbitrary File Upload/RCE 01/06/2020
Topic: PanaceaSoft products Arbitrary File Upload/RCE Risk: Medium Text:# Exploit Title: PanaceaSoft products Arbitrary File Upload/RCE # Google Dork: NA # Date: 25/5/2020 # Exploit Author: syfi ...
SyFi
NeonLMS - Learning Management System PHP Laravel Script - 'Messages' Persistent Cross Site Scripting 30/05/2020
Topic: NeonLMS - Learning Management System PHP Laravel Script - 'Messages' Persistent Cross Site Scripting Risk: Low Text:# Exploit Title: NeonLMS - Learning Management System PHP Laravel Script - 'Messages' Persistent Cross Site Scripting # Exploi...
th3d1gger

Apple Pays $100K Bounty for Critical ‘Sign in With Apple’ Flaw 01/06/2020
Apple has fixed a critical flaw in its Sign in with Apple feature, which could have been abused by attackers to takeover victims' third-party applications.
Lindsey O'Donnell
Minneapolis Police Department Hack Likely Fake, Says Researcher 01/06/2020
Troy Hunt said that the supposed data breach perpetrated by Anonymous is most likely a hoax.
Tara Seals
Hosting Provider’s Database of Crooked Customers Leaked 01/06/2020
Database of sensitive info, including emails and passwords, from owners of Daniel’s Hosting portals could be incriminating.
Elizabeth Montalbano
Steganography Anchors Pinpoint Attacks on Industrial Targets 29/05/2020
Ongoing spear-phishing attacks aim at stolen Windows credentials for ICS suppliers worldwide.
Tara Seals
NTT Communications Data Breach Affects Customers, Threatens Supply Chain 29/05/2020
Attackers managed to compromise NTT Communication’s Active Directory server and a construction information management server.
Lindsey O'Donnell
NSA Warns of Sandworm Backdoor Attacks on Mail Servers 29/05/2020
The Russian spy group, a.k.a. BlackEnergy, is actively compromising Exim mail servers via a critical security vulnerability.
Tara Seals
‘Hack-For-Hire’ Firms Spoof WHO To Target Google Credentials 29/05/2020
Google TAG report reveals that "hack for hire" firms are tapping into the coronavirus pandemic via WHO phishing lures.
Lindsey O'Donnell
ACLU Sues Clearview AI Over Faceprint Collection, Sale 29/05/2020
Watchdog group said company has violated the Illinois BIPA and ‘will end privacy as we know it’ without intervention.
Elizabeth Montalbano
Inside the Hoaxcalls Botnet: Both Success and Failure 28/05/2020
The DDoS group sets itself apart by using exploits -- but it doesn't always pan out.
Tara Seals
Hackers Compromise Cisco Servers Via SaltStack Flaws 28/05/2020
Attackers compromised six Cisco VIRL-PE servers that are affected by critical SaltStack vulnerabilities.
Lindsey O'Donnell