theyhack.me

Overview This will be fairly straight to the point since it’s another FreePBX vulnerability.

Overview I did a quick glance over Nagios Log server a couple months ago and wanted to share two vulnerabilities I reported.

Overview I recently decided to take a look at FreePBX after reading watchTowr’s awesome blog post detailing an auth bypass -> SQLi -> RCE.

Overview Nagios XI is vulnerable to an authenticated command injection vulnerability in the Configuration Wizard functionality, specifically the PostgreSQL and MySQL Query service monitors (possibly others as well).

Overview When I was starting out in penetration testing, it always confused me how folks would say they worked using a simple CLI only linux machine in a VPS.

Overview I recently noticed quite a few folks recently looked at Nagios XI.

CVE-2021-42840 This one will be a bit short, since severity/impact/video/etc is all identical to my post on the previous SuiteCRM RCE.

Path traversal in File Upload leads to Remote Code Execution in Chamilo LMS Overview It’s been a bit since I spent some time looking for a web vuln… And this one was a great one to come back to.

tldr/oneliner ruby -e '"".class.ancestors[3].system("cat /etc/passwd")' Why?

Remediation testing I found another vulnerability during remediation testing, and that writeup can be found here.