CVE-2020-9484

CVE-2020-9484 参考 作者：redtimmysec, masahiro331 https://packetstormsecurity.com/files/157924/CVE-2020-9484.tgz + 我刚分析了 1-day 漏洞利用并进行改造。 描述 与之前的 PoC 相比，它具有以下优势。 + 适用于 Ubuntu 18.04 的环境脚本。 + 您可以编辑用于远程代码执行的命令。 + Cookie 值已在 PoC 代码中预先设置。 使用方法 root@kitploit: id : qerogram pw : 1234 $ cd /exploit Auto set t...

WordPress Easy Social Icons plugin <= 3.2.0 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by qerogram in WordPress Easy Social Icons plugin versions = 3.2.0. Solution Update the WordPress Easy Social Icons plugin to the latest available version at least 3.2.1...

WordPress String locator plugin <= 2.4.2 - Arbitrary File Read vulnerability

Arbitrary File Read vulnerability discovered by qerogram in WordPress String locator plugin versions = 2.4.2. Solution Update the WordPress String locator plugin to the latest available version at least 2.5.0...

WordPress Amelia plugin <= 1.0.45 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by qerogram in WordPress Amelia plugin versions = 1.0.45. Solution Update the WordPress Amelia plugin to the latest available version at least 1.0.46...