49 POSTS
DATECATTITLETARGETCVSS
2022· 4
26-04POSTVestaCP Multiple VulnerabilitiesVestaCP7.815-02EXPLOITCVE-2022-24977 - ImpressCMS path traversal to pre-auth RCEImpressCMS9.815-02CVECVE-2022-24977 - ImpressCMS path traversal to pre-auth RCEImpressCMS9.812-02POSTimpressCMS - unauthenticated code executionImpressCMS9.82021· 16
07-12CVECVE-2020-36474 - Vanilla SSRFVanilla9.805-12POSTHITCON CTF 2021 Metamon-Verse WriteupHitconCTF 2021—23-11POSTMoodle Blind SQL injection via MNet authenticationMoodle7.222-10POSTMoodle - Stored XSS and blind SSRF possible via feedback answer textMoodle6.120-08POSTVanilla - SSRF via media scrape API through dns rebindingVanilla9.809-08POSTRoxy-WI through 5.2.2.0 pre-auth RCERoxy-wi9.807-08CVECVE-2021-38169 - Roxy-WI through 5.2.2.0 allows authenticated cmd InjectionRoxy-WI8.807-08CVECVE-2021-38168 - Roxy-WI through 5.2.2.0 allows authenticated SQL injectionRoxy-WI8.807-08CVECVE-2021-38167 - Roxy-WI through 5.2.2.0 allows unauthenticated SQL InjectionRoxy-WI9.822-07CVECVE-2021-36396 - Moodle Blind SSRF possible against cURL blocked hostsMoodle7.517-05CVECVE-2021-32474 - Moodle Blind SQL injection via MNet authenticationMoodle7.217-05EXPLOIT3kCTF-2021 - babyrtos exploit3kCTF 2021—17-05EXPLOIT3kCTF-2021 - telnet exploit3kCTF 2021—17-05POST3kCTF-2021 - ppaste writeup3kCTF 2021—16-03CVECVE-2021-20280 - Moodle Stored XSS and blind SSRF via feedback answer textMoodle5.411-01POSTh1CTF - HackyHolidays walkthroughH1-CTF—CONTACT
rekter0
PROFESSIONAL SLOPPER
Application security research. vulnerability disclosure, and the occasional pre-auth RCE chain.
28CVE7EXPLOIT14POST