Firefox ESR 115.11 – PDF.js Arbitrary JavaScript execution

# Exploit Title: Firefox ESR 115.11 – Arbitrary JavaScript execution in PDF.js # Date: 2025-04-16 # Exploit Author: Milad Karimi (Ex3ptionaL) # Contact: miladgrayhat@gmail.com # Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL # MiRROR-H: https://mirror-h.org/search/hacker/49626/ # Vendor Homepage: https://wordpress.org # Version: = 115.11 # Tested on: Win, Ubuntu # CVE : CVE-2024-4367 #!/usr/bin/env python3 import sys def…

Read More

Private capital group Blackstone plots $500bn expansion in Europe

Unlock the Editor’s Digest for free Roula Khalaf, Editor of the FT, selects her favourite stories in this weekly newsletter. Blackstone Group is preparing to significantly increase its investments across Europe as the private capital group bets economic reforms will revive growth after years of US outperformance. Stephen Schwarzman, co-founder of the $1.2tn-in-assets investment group,…

Read More

Amazon’s $20bn push into orbit targets SpaceX and China

ASSUMING THE weather co-operates—thunderstorms have already caused the abandonment of one launch, on April 9th—at some point in the coming days Amazon will get itself into the space business. A United Launch Alliance (ULA) rocket is on the launchpad in Florida, carrying the first batch of 27 satellites for Amazon’s new “Kuiper” satellite-internet system. The…

Read More

WordPress User Registration & Membership Plugin 4.1.2 – Authentication Bypass

#!/usr/bin/env python3 # Exploit Title: WordPress User Registration & Membership Plugin 4.1.2 – Authentication Bypass # Date: 2025-05-22 # Exploit Author: Mohammed Idrees Banyamer # Vendor Homepage: https://wordpress.org/plugins/user-registration/ # Software Link: https://downloads.wordpress.org/plugin/user-registration.4.1.2.zip # Version: <= 4.1.2 # Tested on: WordPress 6.x, Apache on Linux # CVE: CVE-2025-2594 import requests import sys import argparse from…

Read More