Path Traversal News Today

Critical severity vulnerability in Better Search Replace WordPress plugin could lead to sensitive file retrieval and arbitrary code execution

OSINT (open-source intelligence) is the practice of collecting information from published or otherwise publicly available sources. These tools will help you find sensitive public info before bad guys do.

# Exploit Title: Path Traversal Vulnerability in Thruk Monitoring Web Interface ≤ 3.06# Date: 08-Jun-2023# Exploit Author: Galoget Latorre (@galoget)# CVE: CVE-2023-34096 (Galoget Latorre)# Vendor Homepage: https://thruk.org/# Software Link: https://github.com/sni/Thruk/archive/refs/tags/v3.06.zip# Software Link + Exploit + PoC (Backup): https://github.com/galoget/Thruk-CVE-2023-34096# CVE Author Blog: https://galogetlatorre.blogspot.com/2023/06/cve-2023-34096-path-traversal-thruk.html# GitHub...

All-In-One Security (AIOS) WordPress plugin vulnerabilities impact up to +1 million WordPress sites

This article describes three additional vulnerabilities discovered and responsibly disclosed by the SonarSource R&D team in GoCD 21.2.0.

It may be recalled that on the 14th March, 2023, the Office of the Honourable Minister of Communications and Digital Economy released a Press Statement

Minister of Communications and Digital Economy, Professor Isa Ali Ibrahim (Pantami), disclosed this in a statement signed by his Spokesperson, Uwa Sulaimon.

Ministry of Communications and Digital Economy has said while monitoring the cyberspace, about 12.9 million attacks were launched against servers of the Independent National Electoral Commission (INEC) and others during the February 25, 2023 Presidential and National Assembly elections from within and outside Nigeria.

The Honourable Minister of Communications and Digital Economy, Professor Isa Ali Ibrahim (Pantami), FCIIS, FBCS, FNCS, wishes to bring to the attention of the

The Minister of Communications and Digital Economy, Prof. Isa Pantami, disclosed this in a statement on Tuesday.