16 POSTS · TAG · #php
DATECATTITLETARGETCVSS
2022· 3
15-02EXPLOITCVE-2022-24977 - ImpressCMS path traversal to pre-auth RCEImpressCMS9.815-02CVECVE-2022-24977 - ImpressCMS path traversal to pre-auth RCEImpressCMS9.812-02POSTimpressCMS - unauthenticated code executionImpressCMS9.82021· 7
07-12CVECVE-2020-36474 - Vanilla SSRFVanilla9.823-11POSTMoodle Blind SQL injection via MNet authenticationMoodle7.222-10POSTMoodle - Stored XSS and blind SSRF possible via feedback answer textMoodle6.120-08POSTVanilla - SSRF via media scrape API through dns rebindingVanilla9.822-07CVECVE-2021-36396 - Moodle Blind SSRF possible against cURL blocked hostsMoodle7.517-05CVECVE-2021-32474 - Moodle Blind SQL injection via MNet authenticationMoodle7.217-05POST3kCTF-2021 - ppaste writeup3kCTF 2021—2020· 6
31-12CVECVE-2020-36474 - safecurl <= 3.3, vanilla forum <= 0.9.2 dns rebind to ssrfsafecurl9.829-09CVECVE-2020-26134 - Live Helper Chat before 3.44v - stored xssLive6.125-07EXPLOIT3kCTF-2020 - Glitch exploit3kCTF 2020—25-07POST3kCTF-2020 - Glitch writeup3kCTF 2020—25-07POST3kCTF-2020 - reporter writeup3kCTF 2020—14-05EXPLOITCVE-2020-12720 - Vbulletin RCEVbulletin9.8CONTACT
rekter0
PROFESSIONAL SLOPPER
Application security research. vulnerability disclosure, and the occasional pre-auth RCE chain.
28CVE7EXPLOIT14POST