xss | Tier3 Pakistan

April 12, 2017

na.gov.pk – XSS Vulnerability [Cyber Alert]

Website : na.gov.pk Description : National Assembly of Pakistan. Notification & Disclosure Timeline 10 April, 2017 at 12:05 GMT Vulnerability reported via Open Bug 11 April, 2017 at 05:51 GMT Notification sent to emails provided by […]

March 15, 2017

Cyber Alert – ntp.gov.pk [XSS Vulnerability]

National TB Control Program – Pakistan. 6 March, 2017 at 18:14 GMT Vulnerability reported via Open Bug Bounty 7 March, 2017 at 06:47 GMT Notification sent to generic security emails 7 March, 2017 at 06:47 […]

March 15, 2017

Cyber Alert – civildefence.gov.pk [XSS Vulnerability]

Cyber Alert – civildefence.gov.pk [XSS Vulnerability] Civil Defence Pakistan. Directorate General Civil Defence Pakistan 12 March, 2017 at 20:43 GMT Vulnerability reported via Open Bug Bounty 13 March, 2017 at 08:01 GMT Notification sent to […]

January 19, 2017

expopakistan.gov.pk – Xss vulnerability

website : expopakistan.gov.pk Description Expo Pakistan 2015 Home. Vulnerable URL: http://www.expopakistan.gov.pk/mission-admin/login.php?err=<script>ale rt(‘OPENBUGBOUNTY’)</script> Vulnerability type: XSS Vulnerability status: Publicly disclosed Alexa Rank 2132001

July 26, 2016

www.hu.edu.pk – Sql Vulnerability

website : www.hu.edu.pk/oldwebsitehu/webtest/view_deg_prog.php?id=1 Vuln type : Sql Injection Submitted by : Waqas Haider POC : Vuln-Parameter: id (GET) Type: AND/OR time-based blind Title: MySQL >= 5.0.12 AND time-based blind Payload: id=1 AND SLEEP(5) Title: Generic […]

May 16, 2016

Pakistan FO to seek ISI help against cyber attacks

The decision comes after Foreign Office (FO) systems have faced three major attacks by hackers over the past 18 months. Islamabad: Pakistan Foreign Office has decided to rope in the country’s top spy agency […]

May 16, 2016

pcb.com.pk – XSS vulnerability

pcb.com.pk Pakistan Cricket Board (PCB) Official Website. The Pakistan Cricket Board (PCB) is the central industry for cricket in Pakistan which deals with all the concerned matters of Pakistan cricket and International cricket. 22 […]

May 8, 2016

https://www.24hours.pk – XSS Vulnerability

Website : https://www.24hours.pk Bug : Reflected XSS ( Cross site scripting) Submitted By : Haq Khokhar ( https://twitter.com/Abdulhaqkhokhar ) Location/ URL : https://www.24hours.pk/deals/search Vulnerable Field : Search bar Steps to Reproduce : 1)Goto : https://www.24hours.pk and select […]