Category: Security

[webapps] Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 – 'Drupalgeddon2' Remote Code Execution (PoC)

[webapps] Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 – 'Drupalgeddon2' Remote Code Execution

[webapps] MikroTik 6.41.4 – FTP daemon Denial of Service PoC

[remote] Microsoft Credential Security Support Provider – Remote Code Execution

[webapps] Joomla Convert Forms version 2.0.3 – Formula Injection (CSV Injection)

[shellcode] Linux/x64 – x64 Assembly Shellcode Generator

[webapps] iScripts Easycreate 3.2.1 – Stored Cross-Site Scripting

[webapps] WordPress Plugin Activity Log 2.4.0 – Stored Cross-Site Scripting

[webapps] WordPress File Upload Plugin 4.3.2 – Stored Cross-Site Scripting

[webapps] WUZHI CMS 4.1.0 – Cross-Site Request Forgery (Add Admin User)