>> ARCHIVE: 2019-02

NetSetMan 4.7.1 – ‘Workgroup’ Denial of Service (PoC)

The Ultimate Guide For Subdomain Takeover with Practical

XAMPP 5.6.8 – SQL Injection / Persistent Cross-Site Scripting

Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 – Path Traversal / Cross-Site Scripting

Jenkins – Remote Code Execution

Ask Expert Script 3.0.5 – Cross Site Scripting / SQL Injection

WordPress Plugin WooCommerce – GloBee (cryptocurrency) Payment Gateway 1.1.1 – Payment Bypass / Unauthorized Order Status Spoofing

Zoho ManageEngine ServiceDesk Plus (SDP) < 10.0 build 10012 – Arbitrary File Upload

macOS – Bind (4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (123 bytes)

macOS – Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (103 bytes)