sql injection

Critical SQL Injection flaws in Gentoo Soko can lead to Remote Code Execution

SQL injection vulnerabilities in Gentoo Soko could lead to remote code execution (RCE) on impacted systems. SonarSource researchers discovered two SQL injection vulnerabilities in Gentoo Soko, collectively tracked as CVE-2023-28424 (CVSS score: 9.1) [1],[2], that can be exploited by a remote attacker to execute arbitrary code on vulnerable systems. “The two package search handlers, Search […]

The post Critical SQL Injection flaws in Gentoo Soko can lead to Remote Code Execution appeared first on Security Affairs.

June 28, 2023
0 comment
Read More >>

Hack The Box: Metatwo Machine Walkthrough – Easy Difficulty

In this post, I would like to share a walkthrough of the Metatwo Machine from Hack the Box This room will be considered a medium machine on Hack the Box What will you gain from the Metatwo machine? For the user flag, you will need to abuse the WordPress server which one of the plugins has […]

The post Hack The Box: Metatwo Machine Walkthrough – Easy Difficulty appeared first on Threatninja.net.

April 29, 2023
0 comment
Read More >>