Tag: poc

WordPress 5.1 CSRF + XSS + RCE – Poc

March 15, 2019 / Pablo Plaza Martínez / 5 Comments

A few days ago a vulnerability was discovered in WordPress 5.1 that has already been patched in version 5.1.1, in this post we will explain it and exploit it step by step.
The vulnerability starts in a CSRF so it requires user interaction and javascript enabled in the victim’s browser.
Any doubt or correction will be appreciated.
Continue reading

¿Me ayudas a compatirlo?

Remote Code Execution WinRAR (CVE-2018-20250) POC

February 23, 2019 / Manuel López Pérez / 5 Comments

Hi, today I bring you the “proof of concept” of a vulnerability that was found a few days ago in WinRar. This vulnerability has been running for 19 years and has been patched in version 5.70 beta 1, so if you are a WinRar user it is very important that you update the software.

¿Me ayudas a compatirlo?