Month: August 2026

Terms

XSS2Shell

August 21, 2026August 28, 2026 AL2Meta

XSS2Shell is a critical vulnerability chain in WordPress Core (tracked as CVE-2026-64638) that escalates a pre-authentication reflected Cross-Site Scripting (XSS) bug into full Remote Code Execution (RCE). Discovered

Notes

Altometatron Art Gallery Media List

August 13, 2026August 15, 2026 AL2Meta

Altometatron’s website has a gateway called “Art Gallery”, which can be opened by using the query string “gate_open” with a value of “art_gallery”. The string looks like this

Terms

NJS

August 12, 2026August 12, 2026 AL2Meta

NJS stands for NGINX JavaScript, a dynamic module for NGINX that extends server functionality through JavaScript scripting. It allows administrators to write custom request handlers, implement complex access

Terms

wp2shell

August 3, 2026 AL2Meta

wp2shell is a critical unauthenticated remote code execution (RCE) vulnerability chain in WordPress Core that allows anonymous attackers to take full control of a server without requiring plugins,