CVE-2020-9484

CVE-2020-9484 Riferimenti Autori: redtimmysec, masahiro331 https://packetstormsecurity.com/files/157924/CVE-2020-9484.tgz + Ho appena analizzato l'exploit 1-day. poi rimodellato. Descrizione Rispetto al PoC precedente, presenta i seguenti vantaggi. + Script di ambiente per Ubuntu 18.04. + Puoi...

WordPress Easy Social Icons plugin <= 3.2.0 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by qerogram in WordPress Easy Social Icons plugin versions = 3.2.0. Solution Update the WordPress Easy Social Icons plugin to the latest available version at least 3.2.1...

WordPress String locator plugin <= 2.4.2 - Arbitrary File Read vulnerability

Arbitrary File Read vulnerability discovered by qerogram in WordPress String locator plugin versions = 2.4.2. Solution Update the WordPress String locator plugin to the latest available version at least 2.5.0...

WordPress Amelia plugin <= 1.0.45 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by qerogram in WordPress Amelia plugin versions = 1.0.45. Solution Update the WordPress Amelia plugin to the latest available version at least 1.0.46...