[remote] ClipBucket 5.5.0 - Arbitrary File Upload

cybrmonk Oct 28, 2025  0  16

[remote] ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)

cybrmonk Oct 28, 2025  0  15

[webapps] Tourism Management System 2.0 - Arbitrary Shell Upload

cybrmonk Oct 28, 2025  0  14

[webapps] dotCMS 25.07.02-1 - Authenticated Blind SQL Injection

cybrmonk Oct 28, 2025  0  13

[webapps] Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF)

cybrmonk Oct 28, 2025  0  11

[webapps] XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)

cybrmonk Oct 28, 2025  0  10

[webapps] ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection

cybrmonk Oct 28, 2025  0  10

[local] Mbed TLS 3.6.4 - Use-After-Free

cybrmonk Oct 28, 2025  0  11

[webapps] Concrete CMS 9.4.3 - Stored XSS

cybrmonk Oct 28, 2025  0  10

[remote] HTTP/2 2.0 - Denial Of Service (DOS)

cybrmonk Oct 28, 2025  0  12

Detecting Active Directory Password-Spraying with a Honeypot Account

cybrmonk Oct 28, 2025  0  10

WSUS Is SUS: NTLM Relay Attacks in Plain Sight

cybrmonk Oct 28, 2025  0  11

HIPAA Covered Entities - It’s More Than Just PHI

cybrmonk Oct 28, 2025  0  12

HIPAA Business Associates - What’s Your Function?

cybrmonk Oct 28, 2025  0  11

HIPAA Applicability - Understanding the Security, Breach Notification, and Privacy Rules

cybrmonk Oct 28, 2025  0  14

PCI P2PE vs. E2EE – Scoping it Out

cybrmonk Oct 28, 2025  0  14

Skimming Credentials with Azure's Front Door WAF

cybrmonk Oct 28, 2025  0  9

There's More than One Way to Trigger a Windows Service

cybrmonk Oct 28, 2025  0  9

Detecting Password-Spraying in Entra ID Using a Honeypot Account

cybrmonk Oct 28, 2025  0  9

Hack-cessibility: When DLL Hijacks Meet Windows Helpers

cybrmonk Oct 28, 2025  0  9