Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Anirudh Anand
Trainings 2020
About This Site Hackfest 2020 | Talks, Villages, CTFs | Hackfest is a Bilingual infosec and largest hacking event and community in Canada | Quebec City, Canada | Villages includes Lockpicking, Social-Engineering CTF, Soldering, IoT, RFID, Electronics, Augmented Reality, Amateur RAdio and more! More ›
Formations 2020
À propos du site Hackfest 2020 | Talks, Villages, CTFs | Hackfest is a Bilingual infosec and largest hacking event and community in Canada | Quebec City, Canada | Villages includes Lockpicking, Social-Engineering CTF, Soldering, IoT, RFID, Electronics, Augmented Reality, Amateur RAdio and more! Plus ›
Hands on Technical Trainings - HITBSecConf2020 - Amsterdam
2-Day Training April 20 & 21 Early Bird (< 31st January): EUR 1899 Normal (> 31st January): EUR 2599 3-Day Training April 20, 21 & 22 Early Bird (< 31st January): EUR 2599 Normal (> 31st January): EUR 3199 4-Day Training April 20, 21, 22 & 23 Early Bird (< 31st January): EUR 3499 Normal (> 31st January): EUR 4299 2-DAY TRAINING 1 – Black Belt Pentesting / Bug Hunting Millionaire: Mastering Web Attacks with Full-Stack Exploitation Trainer: Dawid Czagan (Founder/CEO, Silesia Security Lab) Seats...
CVE Request: GetSimple CMS: Multiple Stored XSS
From: Anirudh Anand Date: Fri, 3 Jul 2015 13:27:27 +0530 Hello, GetSimple is a stand-a-alone, fully independent and lite Content Management System. Recently I found that Getsimple CMS is vulnerable to Stored Cross site scripting attack. *POC:* While creating a new page, give the page title as *new"onmouseover="alert(1)";* and in the content, give **. Now save it and then go to *pages.php* and then hover the mouse over the cross mark (which is used to delete the post).
oss-sec: Re: CVE Request: Anchor CMS
From: Anirudh Anand Date: Sat, 27 Jun 2015 00:46:47 +0530 Adding Further details regarding the issue: (sorry for not including the details in the first mail). 1) *Stored/Persistent XSS: * While creating a new page (any authenticated user can create a new page), the page title is not properly sanitized before saving the input the database and hence users inject their own payloads.
Stored XSS while creating a new user
From: Anirudh Anand Date: Fri, 26 Jun 2015 22:30:46 +0530 Hello all, BigTree CMS is a popular Content Management System written in PHP. While creating a new user, the "*Name*" and "*Company*" parameters are not properly sanitized and it leads to stored XSS.
oss-sec: CVE Request: Anchor CMS
From: Anirudh Anand Date: Thu, 25 Jun 2015 16:53:03 +0530 Hello, I would like to receive CVE identifier for the following Issues in the latest version of Anchor CMS: *Reference: * https://github.com/anchorcms/anchor-cms/issues/876 Anchor CMS is a very popular content Management System. There are multiple Stored and DOM based XSS issues in it as reported in the reference. These issues persists in all the latest Anchor CMS releases.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Anirudh
Contact Anirudh, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack