Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.
CVE-2024-21216 | Oracle WebLogic Server leads to Full Server Takeover (Critical). Read More »
CVEs, Bug Bounty, Web
Identified as CVE-2024-40711, Veeam Backup & Replication versions before 12.1. 2.172 allows a threat actor to gain access to unauthenticated remote code execution through an underlying unprotected deserialization vulnerability, and achieves a critical CVSS score of 9.8
CVE-2024-40711 | Criticle UnAuth RCE In Veeam BackUP and Replication Read More »
CVEs, Bug Bounty, Recon, Web
CVE-2024-45409 is usefull for authentication bypass using vulnerability found in Ruby-saml.
CVE-2024-45409 | Ruby-SAML Auth Bypass In GitLab Read More »
CVEs, Bug Bounty, Recon, Web
CVE-2024-8353 | givewp plugin vulnerable to PHP object injection more then 100K wordpress application are using givewp plugin.
CVE-2024-8353 | GiveWP WordPress Plugin Vulnerable to PHP Object Injection Read More »
CVEs, Bug Bounty, CTF, OSINT, Recon, Web
In this blog post, you’ll learn how to find hidden subdomains during bug bounties and pentests. We’ll explore common tools like Amass, Subfinder, Findomain, Assetfinder, and crt.sh. You’ll get installation steps for Kali Linux, Ubuntu, WSL, and Debian and also we will see the commands of amass, subfinder, sublist3r, findomain and assetfinder etc.
Master subdomain HUNTING | Art of findings hidden Assets Part 2 Read More »
Recon, Bug Bounty, Tools