:: Deepquest ::

WordPress Plugin Testimonial Slider and Showcase 2.2.6 – Stored Cross-Site Scripting (XSS)

Sophos XG115w Firewall 17.0.10 MR-10 – Authentication Bypass

The WordPress Core version 6.0.2 release addresses cross site scripting and remote SQL injection vulnerabilities.

This Metasploit module exploits CVE-2022-30526, a local privilege escalation vulnerability that allows a low privileged user (e.g. nobody) escalate to root. The issue stems from a suid binary that allows all users to copy files as root. This module overwrites the firewall’s crontab to execute an attacker provided script, resulting in code execution as root. […]

This archive contains all of the 79 exploits added to Packet Storm in August, 2022.