Collaborate Disseminate
I am trying to see how a publicly known "vulnerable version of the library jquery" can be exploited to make proof of concepts to website owners.
Let’s say we have jquery version 2.1.1 that has known security issues.
If you search… Continue reading How to exploit publicy known vunerable version of jquery?
Drupal, the popular open-source content management system, has released security updates to address multiple “moderately critical” vulnerabilities in Drupal Core that could allow remote attackers to compromise the security of hundreds of thousands of w… Continue reading Drupal Releases Core CMS Updates to Patch Several Vulnerabilities
Say, I have a page where the input from the user is taken and is passed through a simple client-side XSS filter. That filter only replaces < characters with ”.
in = in.replace(/[<]/g, ”);
The input is then passed o… Continue reading Bypass a simple XSS filter that only looks at <
According to https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=jquery+1.12.4 and https://snyk.io/test/npm/jquery/1.12.4, I see that jQuery 1.12.4 has medium serevrity vulnerability.
I checked on exploit-db and searchsploit to… Continue reading Is there a way to exploit jquery 1.12.4 vulnerability?
Data is read from window.location and passed to the wrap() function of function of jQuery via the following statement:
t.Location.wrap(window.location)
The version of jQuery in use is the 1.12.1 – Is this code vulnerable t… Continue reading Is this code vulnerable to DOM based XSS? jquery wrap()
Web-site uses jQuery 1.8.3 which has known XSS vulnerability in selector. (https://snyk.io/vuln/npm:jquery:20120206).
It passes filtered and urldecoded document.location.hash (val2 below) value inside selector.
$(‘div[data-foo=\”+filter… Continue reading XSS with escaped equal sign inside jQuery selector
Is this code vulnerable to DOM based XSS?
The application is using jQuery 3.3.1 and i noticed that Data is read from
window.location.hash and passed to $() via the following statements:
var hash = window.location.hash.sub… Continue reading Is this code vulnerable to dom based XSS?
Paul and April Wright discuss a jQuery Plugin that has been exploited for years is finally getting patched, a flaw in LibSSH leaves thousands of servers at risk, and a remote code implantation flaw found in Medtronic Cardiac Programmers. Full Show Note… Continue reading Bugs, Breaches, and More! – Application Security Weekly #36
This week, Critical Code execution flaws, WordPress working on wiping older versions from existence, Multiple serious flaws in Drupal, TCP/IP flaws leave IoT gear open to mass hijacking, jQuery plugin actively exploited for at least three years, Flaw i… Continue reading LibSSH, WordPress, and LIVE555 – Hack Naked News #194
The flaw in the popular file uploader allows an attacker to upload files and run their own command line shell on any affected server. Continue reading Popular website plugin harboured a serious 0-day for years