Security advisory: Pre-authentication SYSTEM RCE (Zip-Slip plugin planting) in Output Messenger Server 2.0.x (>= 2.0.63) (Srimax Software (Output Technology))

Posted by disclosure via Fulldisclosure on Aug 170day Rubbish Research Team is publicly disclosing a vulnerability in Output Messenger Server 2.0.x (>= 2.0.63) (Srimax Software (Output Technology)). The research is published and a proof-of-concept is available. Pre-authentication SYSTEM RCE (Zip-Slip plugin planting) (CVSS 9.8,... Weiterlesen