Okan KURTULUS
  • ANASAYFA
  • SİBER GÜVENLİK
  • HTB Walkthrough
  • HALL OF FAME
  • Hakkımda (About Me)

Tag: svg upload

October CMS v3.4.4 – Stored Cross-Site Scripting (XSS) (Authenticated)

October CMS v3.4.4 – Stored Cross-Site Scripting (XSS) (Authenticated)

#Exploit Title: October CMS v3.4.4 – Stored Cross-Site Scripting (XSS) (Authenticated) #Date: 29 June 2023 #Exploit Author: Okan Kurtulus #Vendor Homepage: https://octobercms.com #Version: v3.4.4 #Tested on: Ubuntu 22.04 #CVE: 2023-37692 #Proof of Concept: 1-) Install the system through the website […]

Okan Kurtuluş | Yayınlanan 24 July 202324 July 2023 by Okan Kurtuluş

İletişim

— Hackleme ve Savunma Sanatı —

Recent Posts

  • All-in-One WP Migration Plugin Broken Access Vulnerability
  • Disabling EDR via PendingFileRenameOperations
  • X2CRM v8.5 – Stored Cross-Site Scripting (XSS) (Authenticated)
  • Vtiger CRM v8.2.0 – HTML Injection (Authenticated)
  • IDOR Vulnerability in KubeSphere / CVE-2024-46528

Categories

  • Genel (58)
  • HTB Walkthrough (1)
  • SİBER GÜVENLİK (55)
  • SİSTEM VE AĞ (1)
Designed By Okan KURTULUS
Yukarı Çık