August 14, 2025

Author

JetBrains TeamCity 2023.11.4 – Authentication Bypass

Author08 mins

#!/usr/bin/env python3 # -*- coding: utf-8 -*- “”” # Exploit Title: JetBrains TeamCity 2023.11.4 – Authentication Bypass # Date: 2024-02-21 # Exploit Author: ibrahimsql (https://github.com/ibrahimsql) # Vendor Homepage: https://www.jetbrains.com/teamcity/ # Version: < 2023.11.4 # CVE: CVE-2024-27198 # CVSS Score: 9.8 (Critical) # Description: # JetBrains TeamCity before version 2023.11.4 contains a critical authentication bypass #…

Read More

Worst coral bleaching on record for Western Australian reefs

Author03 mins

Watch: Can you un-bleach coral? BBC visits remote Australian reef to find out World-famous coral reefs along Western Australia’s (WA) coast have suffered the worst bleaching on record after the state’s “longest, largest and most intense” marine heatwave, scientists say. Between last August and this May, warmer water temperatures led to significant heat stress on…

Read More

Cisco ISE 3.0 – Authorization Bypass

Author07 mins

# Exploit Title: Cisco ISE 3.0 – Authorization Bypass # Exploit Author: @ibrahimsql ibrahimsql.com # Exploit Author’s github: https://github.com/ibrahmsql # Description: Cisco ISE API Authorization Bypass # CVE: CVE-2025-20125 # Vendor Homepage: https://www.cisco.com/ # Requirements: requests>=2.25.0, urllib3>=1.26.0 # Usage: python3 CVE-2025-20125.py –url https://ise.target.com –session TOKEN –read #!/usr/bin/env python3 # -*- coding: utf-8 -*- …

Read More

Ghost CMS 5.59.1 – Arbitrary File Read

Author012 mins

#!/usr/bin/env python3 # -*- coding: utf-8 -*- “”” # Exploit Title: Ghost CMS 5.59.1 – Arbitrary File Read # Date: 2023-09-20 # Exploit Author: ibrahimsql (https://github.com/ibrahmsql) # Vendor Homepage: https://ghost.org # Software Link: https://github.com/TryGhost/Ghost # Version: < 5.59.1 # Tested on: Ubuntu 20.04 LTS, Windows 10, macOS Big Sur # CVE: CVE-2023-40028 # Category: Web…

Read More

Ghost CMS 5.42.1 – Path Traversal

Author09 mins

#!/usr/bin/env python3 # -*- coding: utf-8 -*- “”” # Exploit Title: Ghost CMS 5.42.1 – Path Traversal # Date: 2023-06-15 # Exploit Author:ibrahimsql (https://github.com/ibrahimsql) # Vendor Homepage: https://ghost.org # Software Link: https://github.com/TryGhost/Ghost # Version: < 5.42.1 # Tested on: Kali Linux 2024.1 Windows 10, macOS Big Sur # CVE: CVE-2023-32235 # Category: Web Application Security …

Read More