Rahul Pratap Singh | Information Security Enthusiast | Exploit D @0x62626262 - Tumblr Blog

Sitepress Multilingual CMS Plugin Unauthenticated Stored XSS

## FULL DISCLOSURE

#Product : Sitepress Multilingual CMS Plugin #Exploit Author : Rahul Pratap Singh #Version : 3.6.3 and Below #Home page Link : https://wpml.org/ #Date : 08/10/2018

Unauthenticated Stored XSS Vulnerability:

—————————————- Description: —————————————- “locale_file_name_en” parameter is not sanitized that leads to stored XSS.

—————————————- Vulnerable Code: —————————————-

—————…

View On WordPress

#cms #Multilingual #plugin #Sitepress #Stored #unauthenticated #wordpress #WPML #XSS

Microsoft Outlook Mail Server Nasty Bug

## FULL DISCLOSURE #Exploit Author : Rahul Pratap Singh #Home page Link : http://www.outlook.com #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 12/11/2016 —————————————- Description: —————————————- Microsoft Outlook Mail Server was not able to handle image of 1×1 pixel and behaving aberrantly. —————————————- Impact: —————————————- Send an…

View On WordPress

#Bug #Flood #Inbox #Mail #Microsoft #Outlook #Server

Amazon Captcha Cracked

Note: I am looking for a job in information security domain. Any lead or link is highly appreciable. ## FULL DISCLOSURE #Exploit Author : Rahul Pratap Singh #Home page Link : http://www.amazon.com #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 1/5/2016 —————————————- Description: —————————————- Amazon has implemented a weak captcha which…

View On WordPress

#Amazon #Captcha #Cracked

Exploit-DB Captcha Cracked

Note: I am looking for a job in information security domain. Any lead or link is highly appreciable. ## FULL DISCLOSURE #Exploit Author : Rahul Pratap Singh #Home page Link : https://www.exploit-db.com/ #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 1/5/2016 —————————————- Description: —————————————- Exploit-DB implemented a weak captcha…

View On WordPress

#Bypass #Captcha #Exploit-DB #Offensive #Security #Team

Advanced Custom Fields Auth XSS Vulnerability

Note: I am looking for a job in information security domain. Any lead or link is highly appreciable. ## FULL DISCLOSURE #Product : Advanced Custom Fields #Exploit Author : Rahul Pratap Singh #Version : 4.4.7 #Home page Link :https://wordpress.org/plugins/advanced-custom-fields/ #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 1/5/2016…

View On WordPress

#Advanced #Auth #Custom #Fields #plugin #Vulnerability #XSS

CM-AD-Changer XSS Vulnerability

## FULL DISCLOSURE #Product : cm-ad-changer #Exploit Author : Rahul Pratap Singh #Version :1.7.2 #Home page Link : https://wordpress.org/plugins/cm-ad-changer/ #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 21/4/2016 XSS Vulnerability: —————————————- Description: —————————————- Following parameters are not sanitized that leads to XSS…

View On WordPress

#cm-ad-changer #plugin #Vulnerability #XSS

Unlimited Pop-Ups WordPress Plugin XSS Vulnerability

## FULL DISCLOSURE #Product : Unlimited Pop-Ups WordPress Plugin #Exploit Author : Rahul Pratap Singh #Version : 1.4.3 #Home page Link : http://codecanyon.net/item/unlimited-popups-wordpress-plugin/8575498 #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 21/4/2016 XSS Vulnerability: —————————————- Description: —————————————- “callback,…

View On WordPress

#plugin #Unlimited Pop-Ups #Vulnerability #XSS

Easy Social Share Buttons for WordPress XSS Vulnerability

## FULL DISCLOSURE #Product :Easy Social Share Buttons for WordPress #Exploit Author : Rahul Pratap Singh #Version :3.2.5 #Home page Link : http://codecanyon.net/item/easy-social-share-buttons-for-wordpress/6394476 #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 21/4/2016 XSS Vulnerability: —————————————- Description: —————————————- Following…

View On WordPress

#Easy Social Share Buttons #plugin #Vulnerability #XSS

Google SEO Pressor Snippet Plugin XSS Vulnerability

## FULL DISCLOSURE #Product : Google SEO Pressor Snippet Plugin #Exploit Author : Rahul Pratap Singh #Version :1.2.6 #Home page Link : https://wordpress.org/plugins/google-seo-author-snippets/ #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 21/4/2016 XSS Vulnerability: —————————————- Description: —————————————- Following parameters are not…

View On WordPress

#Google SEO Pressor #plugin #Vulnerability #XSS

Echosign Plugin for WordPress XSS Vulnerability

## FULL DISCLOSURE #Product : Echosign Plugin #Exploit Author : Rahul Pratap Singh #Version :1.1 #Home page Link : https://wordpress.org/plugins/echosign/ #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 21/4/2016 XSS Vulnerability: —————————————- Description: —————————————- “Page” and “id” parameters are not sanitized that leads to XSS…

View On WordPress

#Echosign #plugin #Vulnerability #XSS

Tweet-wheel XSS Vulnerability

## FULL DISCLOSURE #Product :Tweet-wheel #Exploit Author : Rahul Pratap Singh #Version :1.0.3.2 #Home page Link : https://wordpress.org/plugins/tweet-wheel/ #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 21/4/2016 XSS Vulnerability: —————————————- Description: —————————————- Following parameters are not sanitized that leads to XSS…

View On WordPress

#plugin #Tweet-wheel #Vulnerability #XSS

Persian-woocommerce-sms XSS Vulnerability

## FULL DISCLOSURE #Product :Persian-woocommerce-sms #Exploit Author : Rahul Pratap Singh #Version :3.3.2 #Home page Link : https://wordpress.org/plugins/persian-woocommerce-sms/ #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 21/4/2016 XSS Vulnerability: —————————————- Description: —————————————- “ps_sms_numbers” parameter is not sanitized…

View On WordPress

Soundy Background Music XSS Vulnerability

## FULL DISCLOSURE #Product : Soundy Background Music #Exploit Author : Rahul Pratap Singh #Version : 3.1 #Home page Link : https://wordpress.org/plugins/soundy-background-music/ #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 12/3/2016 XSS Vulnerability: —————————————- Description: —————————————- “war_soundy_audio_volume” parameter is not…

View On WordPress

#plugin #Soundy Background Music #Vulnerability #XSS

DW Question Answer XSS Vulnerability

## FULL DISCLOSURE #Product : DW Question Answer #Exploit Author : Rahul Pratap Singh #Version : 1.4.2.2 #Home page Link : https://wordpress.org/plugins/dw-question-answer/ #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 11/3/2016 XSS Vulnerability: —————————————- Description: —————————————- “_dwqa_anonymous_name” parameter is not sanitized…

View On WordPress

#DW Question Answer #plugin #Vulnerability #XSS

10 Advisories 10 Days

Hello Guys, I recently published some advisories. I would like to share, How I published these advisories and what made my source code reviewing faster. I started source code reviewing a few months ago. At the beginning, it was hell lot of code to review and took hours to review just one single file of any plugin/theme/etc. Got exhausted easily staring at that much code. So, I coded a helper for…

View On WordPress

#Analyzer #Code #Compare #Reviewer #RIPS #Scanner #Source #Tool

Belkin N150 Router Multiple XSS Vulnerabilities

## FULL DISCLOSURE #Product : Belkin N150 Home Router #Exploit Author : Rahul Pratap Singh #Home page Link : http://www.belkin.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Version : F9K1009 v1 #Firmware : 1.00.09 #Date : 24/Feb/2016 → Vulnerability/BUG Report : —————————————- Description: —————————————- Belkin N150 Home router is vulnerable to XSS vulnerability. Numerous…

View On WordPress

#Belkin #Multiple #N150 #Router #Vulnerability #XSS

Import Woocommerce XSS Vulnerability

## FULL DISCLOSURE #Product : Import Woocommerce #Exploit Author : Rahul Pratap Singh #Version : 1.0.1 #Home page Link : https://wordpress.org/plugins/import-woocommerce/ #Website : 0x62626262.wordpress.com #Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 #Date : 24/Feb/2016 XSS Vulnerability: —————————————- Description: —————————————- “alertmsg” parameter is not sanitized that leads to…

View On WordPress

#Import #plugin #v1.0.1 #Vulnerability #Woocommerce #XSS

Trending Blogs

Recently Viewed Blogs

Rahul Pratap Singh | Information Security Enthusiast | Exploit D