Simon Njuguna (Page 2)

19 Mar 2025

CVE-2025-29411 - Authenticated Remote Code Execution (RCE) via arbitrary file upload in iBanking V2.0.0

Description: RCE via file upload Version affected: iBanking V2.0.0 Version fixed: N/A System: https://github.com/MartMbithi/iBanking Researcher: Simon Njuguna Proof

19 Mar 2025

CVE-2025-29410: Hospital management System XSS vulnerability

Description: A stored cross-site scripting (XSS) vulnerability in Hospital management system System: Hospital Management system https://github.com/kishan0725/Hospital-Management-System/ Version affected : 1.0 Version

Gaining remote server access through insecure file uploads

19 Mar 2025

Gaining remote server access through insecure file uploads

Web applications, such as self-service customer portals provide efficiency, accessibility, and convenience, allowing customers to interact with services seamlessly. However, these same applications can become