Bagi rekan-rekan yang menggunakan wordpress versi dibawah 3.6, saya sarankan untuk melakukan update sesegera mungkin ke wordpress 3.6 karena ada beberapa update security di versi terbaru.
Detik News- Exploit DB
- [webapps] Wp2Fac - OS Command Injection September 8, 2023Wp2Fac - OS Command Injection
- [webapps] Wordpress Plugin Elementor 3.5.5 - Iframe Injection September 8, 2023Wordpress Plugin Elementor 3.5.5 - Iframe Injection
- [remote] GOM Player 2.3.90.5360 - Remote Code Execution (RCE) September 8, 2023GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
- [webapps] soosyze 2.0.0 - File Upload September 8, 2023soosyze 2.0.0 - File Upload
- [remote] Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities September 8, 2023Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities
- [webapps] Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS September 8, 2023Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS
- [webapps] Drupal 10.1.2 - web-cache-poisoning-External-service-interaction September 8, 2023Drupal 10.1.2 - web-cache-poisoning-External-service-interaction
- [webapps] Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure September 8, 2023Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure
- [webapps] SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection September 8, 2023SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection
- [dos] SyncBreeze 15.2.24 - 'login' Denial of Service September 8, 2023SyncBreeze 15.2.24 - 'login' Denial of Service
- [local] GOM Player 2.3.90.5360 - Buffer Overflow (PoC) September 8, 2023GOM Player 2.3.90.5360 - Buffer Overflow (PoC)
- [webapps] CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery') September 4, 2023CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')
- [webapps] AdminLTE PiHole 5.18 - Broken Access Control September 4, 2023AdminLTE PiHole 5.18 - Broken Access Control
- [local] Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow September 4, 2023Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow
- [local] Kingo ROOT 1.5.8 - Unquoted Service Path September 4, 2023Kingo ROOT 1.5.8 - Unquoted Service Path
- [webapps] Wp2Fac - OS Command Injection September 8, 2023