Month: February 2019

[dos] NetSetMan 4.7.1 – 'Workgroup' Denial of Service (PoC)

[papers] The Ultimate Guide For Subdomain Takeover with Practical

[webapps] XAMPP 5.6.8 – SQL Injection / Persistent Cross-Site Scripting

[webapps] Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 – Path Traversal / Cross-Site Scripting

[webapps] Jenkins – Remote Code Execution

[webapps] Ask Expert Script 3.0.5 – Cross Site Scripting / SQL Injection

[webapps] WordPress Plugin WooCommerce – GloBee (cryptocurrency) Payment Gateway 1.1.1 – Payment Bypass / Unauthorized Order Status Spoofing

[webapps] Zoho ManageEngine ServiceDesk Plus (SDP) < 10.0 build 10012 – Arbitrary File Upload

[shellcode] macOS – Bind (4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (123 bytes)

[shellcode] macOS – Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (103 bytes)