Outer Web | Explore

/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.

You are here		buer.haus H1-5411 CTF Write-up by erbbysam and ziot \| ziot
\|	\|	nv1t.github.io ProjectSend - Stored XSS to Account Takeover	9.4 parsecs away Travel
\|	\|	I've identified a security concern within the self-hosted file sharing tool ProjectSend in the current version r1605. By exploiting a chain of vulnerabilities - including Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), and weaknesses in its change password implementation - an authenticated attacker can force a logged-in user to unknowingly change their account password, by clicking a link. But let me explain the attack in detail.	9.4 parsecs away Travel
\|	\|	artsploit.blogspot.com Artsploit: [manager.paypal.com] Remote Code Execution Vulnerability	8.1 parsecs away Travel
\|	\|	In December 2015, I found a critical vulnerability in one of PayPal business websites ( manager.paypal.com ). It allowed me to exe...	8.1 parsecs away Travel
\|	\|	blog.kotowicz.net How to upload arbitrary file contents cross-domain	7.7 parsecs away Travel
\|	\|	A blog on security, malware, cryptography, pentesting, javascript, php and whatnots	7.7 parsecs away Travel
\|	\|	adamj.eu How to Score A+ for Security Headers on Your Django Website - Adam Johnson	24.0 parsecs away Travel
\|		This is a blog post version of the talk I gave at DjangoCon Europe 2019 on the 10th April.	24.0 parsecs away Travel