From Privilege Escalation to RCE in Wiki.js
A tale of privilege escalation, command injection, and the humbling art of responsible disclosure
#cve
Posts tagged #cve
Two RCE Design Flaws in ManageEngine Exchange Reporter Plus 5721
ManageEngine Exchange Reporter Plus is a web-based tool for managing and monitoring Exchange Server and Exchange Online environments. It offers over 450 built-in reports on mailboxes, email traffic, user activity, and permissions. The tool supports r...
[CVE-2022-4582] Unauth. SQL Injection vulnerability in Advanced Booking Calendar plugin ≤1.7.1 on Wordpress
1. Giới thiệu về CVE-2022-4582 WordPress là một hệ thống mã nguồn mở dùng để xuất bản blog/website được viết bằng ngôn ngữ lập trình PHP và cơ sở dữ liệu MySQL. WordPress được biết đến như một CMS miễn phí nhưng tốt, dễ sử dụng và phổ biến nhất trên ...
[CVE-2022-35649] 1-Click RCE in Moodle v4.0.1
I. Introduction: Moodle is a free and open-source Course Management System (CMS), also known as a Learning Management System (LMS) or a Moodle Learning Environment (VLE). Written in PHP, it is currently used for blended learning, distance education, ...
