Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability-chain

Security coverage tagged vulnerability-chain.

1.

XSS2Shell: WordPress pre-auth XSS to RCE chain (CVE-2026-64638)

vulnerability | High | 2026-08-07 15:25 | CVE-2026-64638 | pwn.ai | original ↗ | #ai-security | #rce | #public-poc

2.

How Two WordPress Core Bugs Chained into Pre-Auth RCE

research | 2026-07-18 00:00 | bugbunny.ai | original ↗ | #rce | #vulnerability-research | #attack-chains

3.

CVE-2022-24990: TerraMaster TOS unauthenticated remote command execution via PHP Object Instantiation

vulnerability | 2022-03-07 16:20 | CVE-2022-24990 | pwn.ai | original ↗ | #pre-auth-rce | #vulnerability-chain | #terramaster