Tuannq

@tuannq2299

Joined March 2023

About

Application Security Engineer

Available for

Nothing here yet.

Tuannq's blogs

Night-Wolf Teamblogs.night-wolf.io3 posts

Articles Threads Comments

Recently published

TTuannqblogs.night-wolf.io

0

From Privilege Escalation to RCE in Wiki.js

1d ago · 11 min read · I was poking around Wiki.js 2.5.312 one afternoon — as one does — when I found two vulnerabilities that chain together beautifully to turn a wiki moderator into a root shell. One report got accepted.

Join discussion

TTuannqblogs.night-wolf.io

0

[ZVE-2025-3566] Stored XSS to RCE in Manage Engine OpManager

Jul 30, 2025 · 3 min read · In this article, I share my experience discovering a stored XSS vulnerability in Manage Engine OpManager and the creative approach taken to escalate its severity to achieve remote code execution (RCE). The vulnerability stems from inconsistencies in ...

Join discussion

TTuannqblogs.night-wolf.io

0

[CVE-2022-4582] Unauth. SQL Injection vulnerability in Advanced Booking Calendar plugin ≤1.7.1 on Wordpress

Mar 19, 2023 · 4 min read · 1. Giới thiệu về CVE-2022-4582 WordPress là một hệ thống mã nguồn mở dùng để xuất bản blog/website được viết bằng ngôn ngữ lập trình PHP và cơ sở dữ liệu MySQL. WordPress được biết đến như một CMS miễn phí nhưng tốt, dễ sử dụng và phổ biến nhất trên ...

Join discussion

Tuannq

About

Available for

Tuannq's blogs

Recently published

From Privilege Escalation to RCE in Wiki.js

[ZVE-2025-3566] Stored XSS to RCE in Manage Engine OpManager

[CVE-2022-4582] Unauth. SQL Injection vulnerability in Advanced Booking Calendar plugin ≤1.7.1 on Wordpress

Search Hashnode

Tuannq

About

Available for

Tuannq's blogs

Recently published

From Privilege Escalation to RCE in Wiki.js

[ZVE-2025-3566] Stored XSS to RCE in Manage Engine OpManager

[CVE-2022-4582] Unauth. SQL Injection vulnerability in Advanced Booking Calendar plugin ≤1.7.1 on Wordpress