Search the Community

The Ultimate WordPress Performance Toolkit W3 Total Cache helps you speed up your WordPress website with all the necessary tools for beginner, intermediate and advanced WordPress users to accelerate your SEO, User Experience and Search Rankings. Grow your Brand with W3TC today! [Hidden Content] [hide][Hidden Content]]

Web Cache Vulnerability Scanner Web Cache Vulnerability Scanner (WCVS) is a fast and versatile CLI scanner for web cache poisoning developed by Hackmanit. The scanner supports many different web cache poisoning techniques, includes a crawler to identify further URLs to test, and can adapt to a specific web cache for more efficient testing. It is highly customizable and can be easily integrated into existing CI/CD pipelines. Features Support for 9 web cache poisoning techniques: Unkeyed header poisoning Unkeyed parameter poisoning Parameter cloaking Fat GET HTTP response splitting HTTP request smuggling HTTP header oversize (HHO) HTTP meta character (HMC) HTTP method override (HMO) Analyzing a web cache before testing and adapting to it for more efficient testing Generating a report in JSON format Crawling websites for further URLs to scan Routing traffic through a proxy (e.g., Burp Suite) Limiting requests per second to bypass rate limiting [hide][Hidden Content]]

MikroTik RouterOS version 6.45.6 DNS cache poisoning exploit. View the full article

WordPress WP Fastest Cache plugin versions 0.8.9.5 and below suffer from a directory traversal vulnerability. View the full article

The Windows Font Cache Service exposes section objects insecurely to low privileged users resulting in elevation of privilege. View the full article

On Microsoft Windows, the LUAFV driver can confuse the cache and memory manager to replace the contents of privileged file leading to elevation of privilege. View the full article

WordPress WP Fastest Cache plugin versions 0.8.9.0 and below suffer from an arbitrary file deletion vulnerability. View the full article