Hello everyone, In this post, I want to walk through a Windows kernel driver research session that started as a simple curiosity and slowly turned into something much more interesting. The target was WinCDEmu’s kernel driver, BazisVirtualCDBus.sys. WinCDEmu is a […]
Hello everyone, A friend of mine was looking for a plugin to migrate their WordPress site to another location. After a quick Google search, I found the “All-in-One WP Migration” plugin. When I checked its active installations, I was surprised […]
#Exploit Title: X2CRM v8.5 – Stored Cross-Site Scripting (XSS) (Authenticated) #Date: 12 September 2024 #Exploit Author: Okan Kurtulus #Vendor Homepage: https://x2engine.com #Version: v8.5 #Tested on: Ubuntu 22.04 #CVE: 2024-48120 Proof of Concept: Log in to the system with any user […]
Hi guys, I am writing to report a potential Insecure Direct Object Reference (IDOR) vulnerability that I have discovered in KubeSphere. Below are the details of the vulnerability: There is a potential Insecure Direct Object References (IDOR) vulnerability in KubeSphere […]
#Exploit Title: CMS Made Simple v2.2.17 – Stored Cross-Site Scripting (XSS) (Authenticated) #Date: 25 June 2023 #Exploit Author: Okan Kurtulus #Vendor Homepage: https://www.cmsmadesimple.org #Version: 2.2.17 #Tested on: Ubuntu 18.04 #CVE: 2023-36970 #Proof of Concept: 1-) Install the system through the […]
Merhaba arkadaşlar, bu yazımda parolasını bilmediğiniz bir bilgisayara fiziksel olarak erişim sağladığınızda bilgisayarı açabilme, yönetici hesabını kaldırabilme, parolasını değiştirme veya parolasını kaldırma gibi işlemleri nasıl yapabileceğinizi elimden geldiğince anlatmaya çalışacağım. Genelde fiziksel sızma testlerinde uygulanan bir yöntemdir ve çokta işe […]
