Exploitation of multiple vulnerabilities in GLPI to gain remote code execution from unauthenticated privileges.

An OSINT investigation into the world of forged documents business

In this blog post, we describe new techniques to dump PHP files leveraging filters, and a tool that does it.

In this blog post, we will explore how we can exploit CNEXT, but blind, covering the cases where we have a file read primitive, but cannot get the output.

An authentication bypass vulnerability was found on Jupiter X Core Plugin <= 4.7.5 (CVE-2024-7781).

A pre-authentication remote code execution vulnerability was found on Jupiter X Core Plugin <= 4.6.5 (CVE-2024-7772).