Blog - SANU P.L

By SANU P.L August 17, 2024 No Comments

OSCP Certification Exam Roadmap

OSCP Certification Roadmap Achieving the Offensive Security Certified Professional (OSCP) certification is a significant milestone for any cybersecurity professional. The exam is known for its rigorous and hands-on nature, requiring candidates to demonstrate their skills in a controlled environment. My...

CVE

By SANU P.L January 31, 2024 No Comments

LetterPress <= 1.2.1 – Open Redirection Via Html Injection Vulnerability

Exploit Title: LetterPress <= 1.2.1 – Open Redirection Via Html Injection Vulnerability Exploit Author: P.L.Sanu CVE: CVSS: References: https://github.com/plsanu/LetterPress-1.2.1-Open-Redirection-Via-Html-Injection-Vulnerability Description: In LetterPress plugin <= 1.2.1 is vulnerable to Html Injection Vulnerability which can futher leads to Open Redirection Vulnerabilty. Exploit:...

CVE

By SANU P.L January 31, 2024 No Comments

LetterPress <= 1.2.1 – Cookie Stealing Vulnerability

Exploit Title: LetterPress <= 1.2.1 – Cookie Stealing VulnerabilityExploit Author: P.L.SanuCVE: CVSS: References: https://github.com/plsanu/LetterPress-1.2.1-Cookie-Stealing-Vulnerability Description:In LetterPress plugin <= 1.2.1 is vulnerable to Cookie Stealing Vulnerability. An attacker can able to steal the cookies by injecting the JavaScript code. Exploit:1. In...

CVE

By SANU P.L December 29, 2021 No Comments

Vehicle Service Management System – ‘Multiple’ Cross-Site Request Forgery (CSRF) Leads to Stored Cross Site Scripting (XSS)

CVE-2021-46080 Exploit Title: Vehicle Service Management System – ‘Multiple’ Cross-Site Request Forgery (CSRF) Leads to Stored Cross Site Scripting (XSS) Exploit Author: P.L.Sanu CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM References: Vehicle Service Management System – ‘Multiple’ Cross-Site Request Forgery (CSRF) Leads...