7 matches found
CVE-2021-25094-tatsu-preauth-rce
Preauth RCE in Tatsu builder Wordpress plugin CVE-2021-25094 Simple PoC of an unauthenticated RCE in Tatsu Builder = 3.3.11 provided as an example. Full write-up here: https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ Usage: python3 exploit-rce.py -h --technique TECHNIQUE...
typehub-exploiter
typehub-exploiter GILANG - Exploiter for CVE-2021-25094 referrence : https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ payload : site.com/wp-admin/admin-ajax.php bug path : site.com/wp-content/uploads/typehub/custom/ Thanks to : Ibnudz, Dark clown security greetz : Garuda...
Top Five Attacking IPs This Month: Their Locations May Not Be Where You Think
At Wordfence, we see large amounts of threat actor data, and often that data tells unexpected stories. Taking a look at just the top five attacking IP addresses over a 30 day period, you might be surprised to find out where these attacks are originating, and what they are doing. When most people...
Tatsu Builder Template Editing Plugin Code Execution
The vulnerability of the addCustomFont function in the Tatsu Builder template editing plugin for WordPress content management systems is related to the ability to download unlimited dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by downloadi...
Tatsu Builder Plugin for WordPress < 3.3.13 Remote Code Execution
The WordPress Tatsu Builder Plugin installed on the remote host is affected by an unauthenticated remote code execution. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
Millions of Attacks Target Tatsu Builder Plugin
The Wordfence Threat Intelligence team has been tracking a large-scale attack against a Remote Code Execution vulnerability in Tatsu Builder, which is tracked by CVE-2021-25094 and was publicly disclosed on March 24, 2022 by an independent security researcher. The issue is present in vulnerable...
