corpus.blog
41554 blogs · [ { "id": "01a08c54-46c9-7396-960e-26160418d8dd", "title": "CVE-2025-67736 FreePBX Authenticated SQL Injection leads to RCE", "url": "https://theyhack.me/CVE-2025-67736-FreePBX-Authenticated-SQL-Injection/", "published_at": "2026-02-07T00:00:00+00:00" }, { "id": "01a08c54-46c9-7396-960e-261604c8a1e8", "title": "CVE-2025-34322 and CVE-2025-34323 - Rooting Nagios Log Server with AI! Just kidding, not really… Just an AI adjacent command injection.", "url": "https://theyhack.me/Rooting-Nagios-Log-Server/", "published_at": "2025-11-25T00:00:00+00:00" }, { "id": "01a08c54-46c9-7396-960e-261604e5786a", "title": "CVE-2025-64328 FreePBX Authenticated Command Injection", "url": "https://theyhack.me/CVE-2025-64328-FreePBX-Authenticated-Command-Injection/", "published_at": "2025-11-08T00:00:00+00:00" }, { "id": "01a08c54-46c9-7396-960e-261605641237", "title": "CVE-2025-34227 - Nagios XI Authenticated Command Injection in Configuration Wizard MySQL and PostgreSQL monitoring services leads to Remote Code Execution", "url": "https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/", "published_at": "2025-10-13T00:00:00+00:00" }, { "id": "01a08c54-46c9-7396-960e-261606006585", "title": "Headless Pentesting Machine Setup", "url": "https://theyhack.me/Headless-Pentesting-Machine-Setup/", "published_at": "2025-09-22T00:00:00+00:00" }, { "id": "01a08c54-46c9-7396-960e-26160607966e", "title": "CVE-2024-13986 - Nagios XI Authenticated Arbitrary File Upload + Path Traversal leads to Remote Code Execution", "url": "https://theyhack.me/Nagios-XI-Authenticated-RCE/", "published_at": "2025-01-07T00:00:00+00:00" }, { "id": "01a08c54-46c9-7396-960e-261606680bad", "title": "CVE-2021-42840 SuiteCRM RCE Log File Extension 2", "url": "https://theyhack.me/CVE-2021-42840-SuiteCRM-RCE-2/", "published_at": "2021-05-20T00:00:00+00:00" }, { "id": "01a08c54-46c9-7396-960e-2616073581e3", "title": "CVE-2021-31933 Chamilo LMS File Upload RCE", "url": "https://theyhack.me/CVE-2021-31933-Chamilo-File-Upload-RCE/", "published_at": "2021-04-21T00:00:00+00:00" }, { "id": "01a08c54-46c9-7396-960e-261607d2bf92", "title": "Using Ruby ancestors to Execute Code via the String class", "url": "https://theyhack.me/Ruby-Ancestors/", "published_at": "2020-11-22T00:00:00+00:00" }, { "id": "01a08c54-46c9-7396-960e-2616087c278a", "title": "CVE-2020-28328 SuiteCRM RCE", "url": "https://theyhack.me/CVE-2020-28320-SuiteCRM-RCE/", "published_at": "2020-11-05T00:00:00+00:00" } ] posts Claim your blog
Back to theyhack.me
Blog · corpus.blog/blogs/theyhack.me/posts

theyhack.me

theyhack.me

2026

CVE-2025-67736 FreePBX Authenticated SQL Injection leads to RCEoriginal ↗
7 Feb 2026

2025

CVE-2025-34322 and CVE-2025-34323 - Rooting Nagios Log Server with AI! Just kidding, not really… Just an AI adjacent command injection.original ↗
25 Nov 2025
CVE-2025-64328 FreePBX Authenticated Command Injectionoriginal ↗
8 Nov 2025
CVE-2025-34227 - Nagios XI Authenticated Command Injection in Configuration Wizard MySQL and PostgreSQL monitoring services leads to Remote Code Executionoriginal ↗
13 Oct 2025
Headless Pentesting Machine Setuporiginal ↗
22 Sept 2025
CVE-2024-13986 - Nagios XI Authenticated Arbitrary File Upload + Path Traversal leads to Remote Code Executionoriginal ↗
7 Jan 2025

2021

CVE-2021-42840 SuiteCRM RCE Log File Extension 2original ↗
20 May 2021
CVE-2021-31933 Chamilo LMS File Upload RCEoriginal ↗
21 Apr 2021

2020

Using Ruby ancestors to Execute Code via the String classoriginal ↗
22 Nov 2020
CVE-2020-28328 SuiteCRM RCEoriginal ↗
5 Nov 2020