- تاریخ ثبتنام
- 2020-06-26
- نوشتهها
- 24,438
- راهحلها
- 27
- پسندها
- 3,278
- امتیازها
- 113
- سن
- 28
- محل سکونت
- England
- وب سایت
- xenforo.xyz
It looks like a group has been actively exploiting XSS vulnerabilities in older versions of XenForo (< 2.3.9).
They targeted 112 sites and defaced at least some of them.
Two of the sites affected were linux.org and FreeBSD.org, both supporting popular open source projects, which seem to be rather unfortunate targets for someone allegedly trying to get a message over.
...
They targeted 112 sites and defaced at least some of them.
Two of the sites affected were linux.org and FreeBSD.org, both supporting popular open source projects, which seem to be rather unfortunate targets for someone allegedly trying to get a message over.
I had upgrade xenforo on my todo list, and didn't get to it in time. Someone was able to use a new XSS vulnerability to inject code into a site widget. After many mysql queries we found it happened at about 14:06 ET. Also, did not see any exports or ability to do any exports. I played it...
...
