Aggregator

A vulnerability, which was classified as critical, has been found in Google Android. Affected by this issue is the function do_epoll_ctl of the file eventpoll.c. The manipulation leads to use after free. This vulnerability is handled as CVE-2020-0466. Attacking locally is a requirement. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, has been found in Wasmtime up to 2.0.1. Affected by this issue is some unknown functionality. The manipulation of the argument a leads to out-of-bounds write. This vulnerability is handled as CVE-2022-39392. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 4.17.10. This issue affects the function truncate_inline_inode of the file fs/f2fs/inline.c of the component f2fs Image Handler. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2018-14615. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in Mozilla Firefox up to 68.x and classified as critical. Affected by this issue is some unknown functionality of the component Maintenance Service. The manipulation leads to race condition. This vulnerability is handled as CVE-2019-11736. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

文章介绍了一种利用MYSQL UDF（用户自定义函数）进行提权的实验方法。通过上传DLL文件并调用UDF功能，将MYSQL账号权限提升至系统system权限。实验涉及Kali Linux、Metasploit等工具，并详细描述了前期配置信息搜集和提权操作步骤。

pamspy — Credentials Dumper for Linux pamspy leverages eBPF technologies to achieve an equivalent work of 3snake. It will track a particular userland function inside the PAM (Pluggable Authentication Modules) library, used by many...

The post pamspy: Credentials Dumper for Linux using eBPF appeared first on Penetration Testing Tools.

当前环境出现异常问题，需完成验证操作后才能继续访问相关内容或功能。

当前环境出现异常问题,需完成验证后才能继续访问相关内容或服务。

当前网络环境出现异常情况，需完成验证操作后方可继续访问相关内容。

本文介绍了使用Dirsearch、Gobuster和Dirbuster三款工具进行目录和文件探测的实验目的及原理，详细解析了Dirsearch的功能特性及其常用命令参数，并附有免责声明提醒读者谨慎使用技术信息并遵守相关法律法规。

evilgophish Combination of evilginx2 and GoPhish. Why? As a penetration tester or red teamer, you may have heard of evilginx2 as a proxy man-in-the-middle framework capable of bypassing two-factor/multi-factor authentication. This is enticing to us, to say the...

The post evilgophish: Combination of evilginx2 and GoPhish appeared first on Penetration Testing Tools.

A vulnerability was found in Advanced Custom Fields Plugin up to 3.5.1 on WordPress and classified as critical. This issue affects some unknown processing of the file core/actions/export.php of the component POST Parameter Handler. The manipulation of the argument acf_abspath leads to improper control of filename for include/require statement in php program ('php remote file inclusion'). The identification of this vulnerability is CVE-2012-10025. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Asset-Manager Plugin up to 2.0 on WordPress. It has been classified as critical. Affected is an unknown function of the file upload.php. The manipulation leads to unrestricted upload. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is traded as CVE-2012-10026. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in SeaCMS up to 13.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the file Upload/js/player/dmplayer/player. The manipulation of the argument vid leads to cross site scripting. This vulnerability is handled as CVE-2025-50592. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Writebot AI Content Generator SaaS React Template up to 4.0.0. Affected is an unknown function of the file /file-upload of the component POST Request Handler. The manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2025-52078. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Frontend File Manager Plugin up to 21.5 on WordPress and classified as critical. Affected by this issue is the function wpfm_delete_multiple_files. The manipulation leads to missing authentication. This vulnerability is handled as CVE-2023-7306. The attack may be launched remotely. There is no exploit available.

作者毕业后发现求职过程充满问题如虚假职位和低效申请流程，于是创建Laboro平台实时抓取公司真实职位，并开发AI代理自动完成申请流程，完全免费使用。