RCE – Page 2 – core-jmp

// RCE

15 posts

Exploiting a PHP Object Injection in Profile Builder Pro in the era of AI

The article explains how researchers exploited an unauthenticated PHP Object Injection in the WordPress plugin Profile Builder Pro, showing how AI tools…

oxfemale· Mar 20· 21 min ·43

Bypassing29

Bypassing EDR

Living off the Process

The article “Living off the Process” details a technique to inject and execute shellcode into a remote Windows process by reusing existing…

oxfemale· Feb 23· 30 min ·29

EventLog-in: Propagating With Weak Credentials Using the Eventlog Service in Microsoft Windows (CVE-2025-29969)

Active Directory15

Active Directory Eventlog

EventLog-in: Propagating With Weak Credentials Using the Eventlog Service in Microsoft Windows (CVE-2025-29969)

SafeBreach Labs disclosed a critical RCE in the MS-EVEN RPC service (CVE-2025-29969) that lets low-privilege users write arbitrary files remotely on Windows…

oxfemale· Feb 23· 19 min ·15

← 1 2