A vulnerability classified as problematic was found in Colibri Page Builder Plugin up to 1.0.239 on WordPress. This vulnerability affects unknown code of the component Shortcode Handler. The manipulation leads to cross site scripting.
This vulnerabili…
Gopher protocol is used a lot when exploiting SSRF, but how?
a Gopher URL takes the form:
gopher://<host>:<port>/<gopher-path>
but let’s take this example:
gopher://10.10.10.3:80/_POST%20/login%20HTTP/1.1%0aContent-Ty…
Some of you might know privacy.sexy. It gives you plenty of options regarding your Windows privacy and security settings. However, after a major Windows update, those settings will be reset by Windows.
I developed some code to keep my sett…
A vulnerability classified as critical has been found in FOX Plugin up to 1.4.1.6 on WordPress. This affects an unknown part. The manipulation leads to missing authorization.
This vulnerability is uniquely identified as CVE-2023-6556. It is possible t…
A vulnerability was found in kevinlangleyjr Widget Settings Importer-Exporter Plugin up to 1.5.3 on WordPress. It has been rated as problematic. Affected by this issue is the function wp_ajax_import_widget_dataparameter. The manipulation leads to cross…
A vulnerability was found in Moxa ioLogik E1200 up to 3.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to risky cryptographic algorithm.
This vulnerability is known as CVE-202…
A vulnerability was found in Moxa ioLogik E1200 up to 3.3. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery.
This vulnerability is traded as CVE-2023-5961. It is possible to l…
A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors. About Thank you to @albinowax, @defparam and @d3d else this tool would not exist. Inspired by the tool Smuggler all attack gadgets adapted from Smuggler and https://portswigger.n…
I’m reading https://drive.google.com/file/d/1aeNq_5wVwHRR1np1jIRQM1hocrgcZ6Qu/view?pli=1
On page 44 it mentions about a way to exploit IIS servers,
I tried to reproduce it but it didn’t work.
I created a Windows 2016 IIS server and add a…
There have recently been several reported security issues with OpenSSH (Terrapin, double-frees, remote execution, X11 forwarding vulnerabilities..). How safe is it for a server to expose OpenSSH (using public key authentication) to the int…
