July 27, 2025
Headlines

Simple File List WordPress Plugin 4.2.2 – File Upload to RCE

Author04 mins

# Exploit Title: Simple File List WordPress Plugin 4.2.2 – File Upload to RCE # Google Dork: inurl:/wp-content/plugins/simple-file-list/ # Date: 2025-07-15 # Exploit Author: Md Amanat Ullah (xSwads) # Vendor Homepage: https://wordpress.org/plugins/simple-file-list/ # Software Link: https://downloads.wordpress.org/plugin/simple-file-list.4.2.2.zip # Version: <= 4.2.2 # Tested on: Ubuntu 22.04 # CVE: CVE-2020-36847 #!/usr/bin/env python3 import requests import sys,…

Read More

Beyond accelerators: Lessons from building foundation models on AWS with Japan’s GENIAC program

Author025 mins

In 2024, the Ministry of Economy, Trade and Industry (METI) launched the Generative AI Accelerator Challenge (GENIAC)—a Japanese national program to boost generative AI by providing companies with funding, mentorship, and massive compute resources for foundation model (FM) development. AWS was selected as the cloud provider for GENIAC’s second cycle (cycle 2). It provided infrastructure…

Read More

LiveHelperChat 4.61 – Stored Cross Site Scripting (XSS) via Personal Canned Messages

Author02 mins

# Exploit Title: LiveHelperChat 4.61 – Stored Cross Site Scripting (XSS) via Personal Canned Messages # Date: 09/06/2025 # Exploit Author: Manojkumar J (TheWhiteEvil) # Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ # Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ # Software Link: https://github.com/LiveHelperChat/livehelperchat/ # Version: <=4.61 # Patched Version: 4.61 # Category: Web Application # Tested on: Mac OS Sequoia 15.5, Firefox #…

Read More