CPTS - Exam Report (Updated on April - 2025)

CPTS Exam Support 

📄 Updated Examination Report (April 2025): This is a detailed report that includes step-by-step explanations along with relevant screenshots for better understanding.

Need help Understanding Report or have questions about the CPTS Exam? Feel free to reach out to me via:

• Telegram : @FsKnockouT
• Discord    : @FsKnockouT
  

  
  

  ---

  CPTS Exam – Vulnerability Finding
  

  🛠️ Vulnerability Findings Summary

  #	Severity	Finding Name
  1	9.0 (Critical)	Remote Code Execution (RCE)
  2	8.8 (High)	SQL Injection (SQLi)
  3	8.5 (High)	Account Takeover
  4	7.5 (High)	Privilege Escalation on API
  5	9.0 (Critical)	Remote Code Execution (RCE) on API
  6	7.5 (High)	Werkzeug Console RCE via WEBSVC to SRVADM
  7	8.8 (High)	Docker Privilege Escalation – SRVADM to ROOT
  8	9.3 (Critical)	Master Password Disclosure via NFS Share
  9	8.4 (High)	GlassFish Server RCE
  10	7.5 (High)	Privilege Escalation via SeLoadDriverPrivilege Enabled
  11	7.8 (High)	SeDebugPrivilege Enabled
  12	7.5 (High)	Privilege Escalation via Login Session Hijacking
  13	7.5 (High)	Account Takeover via Plain Text Credentials on Sticky Notes
  14	8.8 (High)	Wondershare Dr.Fone 12.0.7 – Privilege Escalation (ElevationService)
  15	0.0 (Info)	Zone Transferring