Exploits

Exploits Collection of Exploits developed by Ron Jost For Exploit-development requests, please reach out to me: [email protected] Table of Contents: Wordpress Plugin XCloner 4.2.12 - Remote Code Execution Authenticated: CVE-2020-35948 Wordpress Plugin Modern Events Calendar Lite 5.16.5 - RCE...

Fedora: Security Advisory (FEDORA-2025-1311e4cd58)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Senator Urges FTC Probe Into Microsoft After Ascension Ransomware Attack

US Senator Ron Wyden urges the FTC to investigate Microsoft after its software contributed to a major ransomware…...

MAL-2025-10377 Malicious code in @zalastax/nolb-_ron (npm)

The package @zalastax/nolb-ron was found to contain malicious code...

Malicious code in do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw (npm)

The package do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw was found to contain malicious code...

Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-ron (npm)

The package cash-app-money-generator-new-updated-2023-nhfy702r-ron was found to contain malicious code...

MAL-2025-18549 Malicious code in do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw (npm)

The package do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw was found to contain malicious code...

Fedora 43 : python-uv-build / rust-gitui / rust-gstreamer / rust-ron / etc (2025-1311e4cd58)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-1311e4cd58 advisory. Update rust-ron to 0.9. Update rust-zip to 2.6.1, fixing GHSA-94vh-gphv-8pm8. Tenable has extracted the preceding description block directly from the Fedora...

[SECURITY] Fedora 40 Update: rust-ron-0.9.0-1.fc40

Rusty Object Notation...

Fedora 40 : python-pydantic-core / rust-adblock / rust-cookie_store / etc (2025-e923d51676)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-e923d51676 advisory. Update uv to 0.6.14, with various bugfixes and new features. Update rust-idna to 1.0.3 fixing RUSTSEC-2024-0421, rust-url to 2.5.4, rust- adblock to 0.9.6, a...

[SECURITY] Fedora 42 Update: rust-ron-0.9.0-1.fc42

Rusty Object Notation...

CVE-2024-51652

Cross-Site Request Forgery CSRF vulnerability in marckocher Skip To skip-to allows Stored XSS.This issue affects Skip To: from n/a through = 2.0.0...

CVE-2024-51652

CVE-2024-51652 : WordPress plugin Skip To is affected by a CSRF to Stored Cross-Site Scripting (XSS) vulnerability. The CVE description indicates a CSRF flaw that enables Stored XSS in Skip To versions n/a through 2.0.0. Connected sources substantiate the issue for the Skip To plugin and list the...

About the security content of Xcode 16

About the security content of Xcode 16 This document describes the security content of Xcode 16. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data

The U.S. Federal Communications Commission FCC today levied fines totaling nearly $200 million against the four major carriers -- including AT&T, Sprint, T-Mobile and Verizon -- for illegally sharing access to customers location information without consent. The fines mark the culmination of a mor...

Zimbra Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zimbra sudo + postfix privilege escalation', 'Description' = %q This module exploits a vulnerable sudo configuration that permits the zimbra user...

Zimbra zmslapd Privilege Escalation Exploit

This Metasploit module exploits CVE-2022-37393, which is a vulnerability in Zimbra's sudo configuration that permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-defined configuration file, which...

IRS: Selfies Now Optional, Biometric Data to Be Deleted

The U.S. Internal Revenue Service IRS said Monday that taxpayers are no longer required to provide facial scans to create an account online at irs.gov. In lieu of providing biometric data, taxpayers can now opt for a live video interview with ID.me, the privately-held Virginia company that runs t...

WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 - SQL-Injection (Unauthenticated)

Exploit Title: WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 - SQL-Injection Unauthenticated Date 08.02.2022 Exploit Author: Ron Jost Hacker5preme Vendor Homepage: https://ays-pro.com/ Software Link:...

Fedora: Security Advisory for rust-ron (FEDORA-2022-eb16f07001)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...