15 POSTS · TAG · #rce
DATECATTITLETARGETCVSS
2024· 6
03-02CVECVE-2023-41281 - QTS 5.1.x, QuTS hero h5.1.x, QuTScloud 5.x OS Command InjectionQNAP7.203-02CVECVE-2023-39297 - QTS 5.1.x, 4.5.x; QuTS hero h5.1.x, h4.5.x; QuTScloud 5.x OS Command InjectionQNAP8.803-02CVECVE-2023-39302 - QTS 5.1.x, QuTS hero h5.1.x, QuTScloud 5.x OS Command InjectionQNAP7.203-02CVECVE-2023-41282 - QTS 5.1.x, QuTS hero h5.1.x, QuTScloud 5.x OS Command InjectionQNAP7.203-02CVECVE-2023-41283 - QTS 5.1.x, QuTS hero h5.1.x, QuTScloud 5.x OS Command InjectionQNAP7.206-01CVECVE-2023-39294 - QTS 5.1.x, QuTS hero h5.1.x OS Command InjectionQNAP7.22022· 3
15-02EXPLOITCVE-2022-24977 - ImpressCMS path traversal to pre-auth RCEImpressCMS9.815-02CVECVE-2022-24977 - ImpressCMS path traversal to pre-auth RCEImpressCMS9.812-02POSTimpressCMS - unauthenticated code executionImpressCMS9.82021· 2
05-12POSTHITCON CTF 2021 Metamon-Verse WriteupHitconCTF 2021—09-08POSTRoxy-WI through 5.2.2.0 pre-auth RCERoxy-wi9.82020· 4
31-12POSTiceCTF-2020 - krouter writeup iceCTF 2020—25-07EXPLOIT3kCTF-2020 - babym1ps exploit3kCTF 2020—25-07POST3kCTF-2020 - babym1ps writeup3kCTF 2020—14-05EXPLOITCVE-2020-12720 - Vbulletin RCEVbulletin9.8CONTACT
rekter0
PROFESSIONAL SLOPPER
Application security research. vulnerability disclosure, and the occasional pre-auth RCE chain.
28CVE7EXPLOIT14POST