Загрузка видео...

Не удалось загрузить видео

На главную

🚨CVE-2025-26529: Moodle XSS to RCE Exploit Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.

DarkWebInformer's profile picture

Dark Web Informer

221,798 subscribers

22,954 просмотров • 6 месяцев назад •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

🚨PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE
0:33

🚨PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE

Dark Web Informer

64,458 просмотров • 1 год назад

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,731 просмотров • 2 лет назад

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.
4:07

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.

Gospel

12,744 просмотров • 8 месяцев назад

In Uttar Pradesh, during a Shivratri procession in Maurawan, district Unnao, an incident reportedly occurred at the Eidgah where an Hanuman climbed onto the religious structure, allegedly causing disrespect to the site. The police administration was reportedly unable to prevent the incident. #IslamophobiaInIndia
0:40

In Uttar Pradesh, during a Shivratri procession in Maurawan, district Unnao, an incident reportedly occurred at the Eidgah where an Hanuman climbed onto the religious structure, allegedly causing disrespect to the site. The police administration was reportedly unable to prevent the incident. #IslamophobiaInIndia

Team Rising Falcon

26,299 просмотров • 5 месяцев назад

Everyone deserves to live without threats to their safety. I’m asking Prime Minister Carney to list the Lawrence Bishnoi gang as a terrorist group in Canada, which will give police additional tools they need to stop and prevent the extortion of Canadians.
1:19

Everyone deserves to live without threats to their safety. I’m asking Prime Minister Carney to list the Lawrence Bishnoi gang as a terrorist group in Canada, which will give police additional tools they need to stop and prevent the extortion of Canadians.

David Eby

54,266 просмотров • 1 год назад

Better late than never! Samsung now supports NFC Access Cards in Samsung Wallet. So, your office and apartment NFC access cards can now be stored and used on your Galaxy phone. You can also use the card information stored on your phone as a base for other supported Samsung phones to copy and scan. Unlike payment cards, there’s no authentication required before using the card. Hence, it’s both a convenience and a security risk. To access this feature under Digital Key, you will need to be running One UI 7 at least and updated to Samsung Wallet version 6.0.85 #Samsung #SamsungWallet #NFCCard
1:35

Better late than never! Samsung now supports NFC Access Cards in Samsung Wallet. So, your office and apartment NFC access cards can now be stored and used on your Galaxy phone. You can also use the card information stored on your phone as a base for other supported Samsung phones to copy and scan. Unlike payment cards, there’s no authentication required before using the card. Hence, it’s both a convenience and a security risk. To access this feature under Digital Key, you will need to be running One UI 7 at least and updated to Samsung Wallet version 6.0.85 #Samsung #SamsungWallet #NFCCard

SoyaCincau

14,344 просмотров • 1 год назад

🚨#BREAKING: The Biden administration has offered more than half a million Venezuelan migrants in the U.S. the ability to live and work in the country legally
0:21

🚨#BREAKING: The Biden administration has offered more than half a million Venezuelan migrants in the U.S. the ability to live and work in the country legally

R A W S A L E R T S

757,684 просмотров • 2 лет назад

.Congresswoman Jasmine Crockett: "I think that I would trust [Congress] more than I would trust the DOJ deciding that they're going to interview [Maxwell] and then potentially sanitizing the information that we get, or potentially engaging in some type of threats, or potentially offering a pardon if certain things were said or not said... I don't know what may happen to that witness if the administration gets to her first."
0:57

.Congresswoman Jasmine Crockett: "I think that I would trust [Congress] more than I would trust the DOJ deciding that they're going to interview [Maxwell] and then potentially sanitizing the information that we get, or potentially engaging in some type of threats, or potentially offering a pardon if certain things were said or not said... I don't know what may happen to that witness if the administration gets to her first."

Brian Tyler Cohen

42,140 просмотров • 1 год назад

Hey Palworld, our private server was infiltrated by individuals claiming to be 'Nintendo Hackers,' resulting in the rapid destruction of our entire base. They gained access without invitation, exploiting the server name displayed on my stream to obtain our IP. Is there a way to add streamer mode like in other games to conceal sensitive information such as server name and passwords with asterisks to prevent unauthorized access in the future?
0:50

Hey Palworld, our private server was infiltrated by individuals claiming to be 'Nintendo Hackers,' resulting in the rapid destruction of our entire base. They gained access without invitation, exploiting the server name displayed on my stream to obtain our IP. Is there a way to add streamer mode like in other games to conceal sensitive information such as server name and passwords with asterisks to prevent unauthorized access in the future?

Baker

12,805 просмотров • 2 лет назад

🚨 BREAKING🚨: RM Rep. Jamie Raskin shares an email, obtained by American Oversight, from a Project 2025 leader promising access to jobs in a future Trump Administration in exchange for “real commitment” and “valuable contributions” to the extremist MAGA manifesto.
0:50

🚨 BREAKING🚨: RM Rep. Jamie Raskin shares an email, obtained by American Oversight, from a Project 2025 leader promising access to jobs in a future Trump Administration in exchange for “real commitment” and “valuable contributions” to the extremist MAGA manifesto.

Oversight Dems

468,759 просмотров • 1 год назад

🚨 UPDATE: A major chemical tank is at risk of catastrophic failure in Orange County CA, prompting urgent evacuations across the area. Officials are scrambling to prevent a potential disaster. This is serious. Praying for the safety of everyone in the affected zone.
0:45

🚨 UPDATE: A major chemical tank is at risk of catastrophic failure in Orange County CA, prompting urgent evacuations across the area. Officials are scrambling to prevent a potential disaster. This is serious. Praying for the safety of everyone in the affected zone.

Gunther Eagleman™

101,570 просмотров • 1 месяц назад

🚨 Multiple users are reporting that Kash Patel’s apparel site is serving a ClickFix-style malware lure. The page appears to mimic a Cloudflare verification check and instructs visitors to run platform-specific commands to “verify” access. Instead, those commands can execute malicious code. On macOS, the observed chain reportedly pulls down an infostealer designed to target Keychain data, browser-stored credentials, session tokens, and cryptocurrency wallet information.
0:30

🚨 Multiple users are reporting that Kash Patel’s apparel site is serving a ClickFix-style malware lure. The page appears to mimic a Cloudflare verification check and instructs visitors to run platform-specific commands to “verify” access. Instead, those commands can execute malicious code. On macOS, the observed chain reportedly pulls down an infostealer designed to target Keychain data, browser-stored credentials, session tokens, and cryptocurrency wallet information.

Dark Web Informer

38,839 просмотров • 1 месяц назад

The Biden Administration allowed a suspected Hamas TERRORIST, who was allegedly involved in massacring 69 innocents on October 7, to live in America. The Biden Administration’s visa vetting was reckless, negligent and put American lives at risk. Tricia McLaughlin
1:23

The Biden Administration allowed a suspected Hamas TERRORIST, who was allegedly involved in massacring 69 innocents on October 7, to live in America. The Biden Administration’s visa vetting was reckless, negligent and put American lives at risk. Tricia McLaughlin

Homeland Security

212,439 просмотров • 9 месяцев назад

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.
1:28

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

70,299 просмотров • 26 дней назад

🚨FREEDOM OF INFORMATION REQUEST - IPAS - PLEASE SHARE🚨 Cat of Cancelled Comedy on Tiktok put in an FOI request for her local IPA site, which seems to be for Ballyogan. Cat received a lengthy list of violent incidents where Gardai and / or ambulance services were required for a site visit. Incidents include: 🔪SEVEN "critical incidents" - aka stabbings 🗣️Threats to kill 🍺At least 4 instances of intoxicated disorder 👊Physical assaults
2:20

🚨FREEDOM OF INFORMATION REQUEST - IPAS - PLEASE SHARE🚨 Cat of Cancelled Comedy on Tiktok put in an FOI request for her local IPA site, which seems to be for Ballyogan. Cat received a lengthy list of violent incidents where Gardai and / or ambulance services were required for a site visit. Incidents include: 🔪SEVEN "critical incidents" - aka stabbings 🗣️Threats to kill 🍺At least 4 instances of intoxicated disorder 👊Physical assaults

Terry K

23,567 просмотров • 1 год назад

🚨🇮🇪🇺🇸 To the 40 million Irish-Americans, you need to know what's happening in the motherland, because eventually this will happen to you too! True information is being censored in Ireland! True information is being labeled a "systemic risk"! The Irish government and their lackeys in the Media Commission are ordering social media companies to censor facts and true stories. They're censoring reality..... Please share!
2:10

🚨🇮🇪🇺🇸 To the 40 million Irish-Americans, you need to know what's happening in the motherland, because eventually this will happen to you too! True information is being censored in Ireland! True information is being labeled a "systemic risk"! The Irish government and their lackeys in the Media Commission are ordering social media companies to censor facts and true stories. They're censoring reality..... Please share!

MichaeloKeeffe

79,702 просмотров • 10 месяцев назад

🚨#BREAKING: Urgent Evacuation Notice in Place due to Imminent Risk of Explosion 📌#EastPalestine l #Ohio Residents living within a mile of the train derailment site need to immediately evacuate due to the potential of a major explosion caused by a catastrophic tanker failure.
0:25

🚨#BREAKING: Urgent Evacuation Notice in Place due to Imminent Risk of Explosion 📌#EastPalestine l #Ohio Residents living within a mile of the train derailment site need to immediately evacuate due to the potential of a major explosion caused by a catastrophic tanker failure.

R A W S A L E R T S

1,298,989 просмотров • 3 лет назад