Lenon Leite retweeted
Great discovery @lenonleite 😊 thank you @iamlei for explaining the whole situation behind this disclosure, great job @ex_mi on making the deeper analysis of this case 🥳😎 #WordPress #vulnerabilities #Security
This Post is from an account that no longer exists. Learn more
Happy by do part of this. =)
@patchstackapp Red Team discovered 156 vulnerabilities in April! The prize pool for May increased to $1300 USD! 🎉 #WordPress
patchstack.com/patchstack-re…
Lenon Leite retweeted
@patchstackapp Red Team discovered 156 vulnerabilities in April! The prize pool for May increased to $1300 USD! 🎉 #WordPress
patchstack.com/patchstack-re…
Lenon Leite retweeted
Authenticated Cross-Site Scripting (XSS) vulnerability discovered by @lenonleite in WordPress MalCare Security plugin (versions <= 4.57) #WordPress #vulnerabilities #updatenow bit.ly/3xSQOCz
#DevSoftIn helping for a better internet and safely lnkd.in/ehciJMJ 50k Activated downloads saved. Blind Sql Injection. @_WPScan_
Não podia de esquecer de falar dessa pessoa do coração enorme que eu tenho tanto carinho. Incansável, imparável na hora de ajudar a comunidade, @marcelgsantos tu é o cara mano, obrigado pelo tempo que doa para ajudar a todos nós.
A primeira edição do @DarkmiraTour em 2016, um evento incrível que tive a honra de participar. O @CyrilleGrandval faz um trabalho incrível ao reunir as comunidades. 👏🏽 /cc @leonnleite @lenonleite @stopassola @CalEvans @rdohms @casimiroarruda @dianaarnos @ariskataoka
1
3
Que saudade de todos... Muito legal ver todos em Brasília, reunir a galera, jogar papo fora... foi incrível. =)
A primeira edição do @DarkmiraTour em 2016, um evento incrível que tive a honra de participar. O @CyrilleGrandval faz um trabalho incrível ao reunir as comunidades. 👏🏽 /cc @leonnleite @lenonleite @stopassola @CalEvans @rdohms @casimiroarruda @dianaarnos @ariskataoka
1
3
One more security bug reported. High severity vulnerability, sql injection without authentication. Maybe more one publish today or tomorrow. We will see. @_WPScan_ #WordPress #0day #Security
About the last one disclosure vulnerability with high severity. Starting the week with right foot. @_WPScan_ #WordPress #security #Hacking #exploitation
My little bit part to save the web. One vulnerability with high severity found.
wpscan.com/vulnerabilities/1…
1
wpactivitylog.com/wsal-4-1-4… I'm happy by help more one plugin and project. Nonce problem.
lenonleite.com.br/en/2020/09…
Article about the wrong logical operators use and your problem in WordPress Plugins #vulnerabilities #appsec
#security #hacking #Exploit #exploitation
One by day is good for me github.com/WebberZone/contex… #100SecurityBugFix 🦸🦹♂️
1
Part of attacks today happen by scanning... By range IP's or google dorking... When it's happen can find big bank company or a hospital that save people, it's sad.
Police launch homicide inquiry after German hospital hack bbc.com/news/technology-5420…
My two cent's
if(
isset($_GET['nonce']) &&
! wp_verify_nonce($_GET['nonce'], 'bla') ) die('csrf block');
☠️🔥💣🚀🧨
If $_GET['nonce'] not exist the second part with wp_verify_nonce will not run. You will not have CSRF validation.
1
youtube.com/watch?v=unKCyiWK… Checking vulnerability problems with isset, empty and wp_verify_nonce on WordPress plugins.
Some time out sharpening the ax, time to work. I'm think about new goal, "disclosure of 100 vulnerabilities in WP plugins" Is it possible? How many active downloads I will hit? How much time? I'M BACK!
@_WPScan_
The DAD is ON! (Brazilian joke)
1