Advisory: Next.js SSRF (CVE-2024-34351) #CyberSecurity #Vulnerabilities #Research
Digging for SSRF in NextJS apps #CyberSecurity #Vulnerability #WebDevelopment
Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762 #Cybersecurity #Vulnerability #Exploit
Continuing the Citrix Saga: CVE-2023-5914 & CVE-2023-6184 #CyberSecurity #Vulnerabilities #ThreatIntel
Ivanti's Pulse Connect Secure Auth Bypass Round Two #CyberSecurity #Vulnerabilities #Exploitation
High Signal Detection and Exploitation of Ivanti's Pulse Connect Secure Auth Bypass & RCE #CyberSecurity #Vulnerability #Exploit
Citrix Bleed: Leaking Session Tokens with CVE-2023-4966 #CyberSecurity #Vulnerabilities #Exploits
Advisory: Progress WS_FTP RCE (CVE-2023-40044) #CyberSecurity #Vulnerability #Exploit
RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044) #CyberSecurity #Vulnerabilities #RCE
Advisory: Flarum LFI - CVE-2023-40033 #CyberSecurity #Vulnerability #Exploit
Leaking File Contents with a Blind File Oracle in Flarum #Cybersecurity #Vulnerability #Exploit
Finding and Exploiting Citrix NetScaler Buffer Overflow (CVE-2023-3519) (Part 3) #CyberSecurity #Vulnerability #Exploit
Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 2) #CyberSecurity #Vulnerabilities #CVE
Advisory: Metabase Pre-Auth RCE (CVE-2023-38646) #CyberSecurity #Vulnerability #Exploit
Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646) #CyberSecurity #Vulnerability #Exploit
Advisory: ShareFile Pre-Auth RCE (CVE-2023-24489) #CyberSecurity #Vulnerabilities #Exploitation
Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 3 - Getting to RCE) #CyberSecurity #Vulnerability #RCE
Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489) #CyberSecurity #Vulnerability #RCE
Advisory: Citrix Gateway Open Redirect and XSS (CVE-2023-24488) #CyberSecurity #Vulnerability #CVE
Reversing Citrix Gateway for XSS #Cybersecurity #Vulnerability #XSS
MOVEit Transfer RCE Part Two (CVE-2023-34362) #Cybersecurity #Vulnerability #Exploit
Patch Diffing Progress MOVEIt Transfer RCE (CVE-2023-34362) #CyberSecurity #Vulnerability #Exploit
Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3 #CyberSecurity #Vulnerability #RCE
Advisory: Oracle Opera Pre-Auth RCE (CVE-2023-21932) #CyberSecurity #Vulnerabilities #Exploitation
Exploiting an Order of Operations Bug to Achieve RCE in Oracle Opera #Cybersecurity #Vulnerability #Exploit
Advisory: Reflected Cross-Site Scripting in cPanel (CVE-2023-29489) #CyberSecurity #Vulnerability #CVE
Finding XSS in a million websites (cPanel CVE-2023-29489) #CyberSecurity #Vulnerability #XSS
Pre-Auth RCE in Aspera Faspex: Case Guide for Auditing Ruby on Rails #Cybersecurity #Vulnerabilities #RubyOnRails
RCE in Avaya Aura Device Services #CyberSecurity #Vulnerability #Exploit
Exploiting Hardcoded Keys to achieve RCE in Yellowfin BI #CyberSecurity #Vulnerability #Exploit
Exploiting Static Site Generators: When Static Is Not Actually Static #Cybersecurity #Vulnerabilities #WebSecurity
Breaking Bitbucket: Pre Auth Remote Command Execution (CVE-2022-36804) #CyberSecurity #Vulnerabilities #Exploitation
Advisory: Server Side Request Forgery in Jira Server (CVE-2022-26135) #CyberSecurity #Vulnerability #Jira
Abusing functionality to exploit a super SSRF in Jira Server (CVE-2022-26135) #CyberSecurity #Vulnerability #Jira
Advisory: Multiple Vulnerabilities in Progress Ipswitch WhatsUp Gold #CyberSecurity #Vulnerability #Exploit
Chaining vulnerabilities to criticality in Progress WhatsUp Gold #Cybersecurity #Vulnerability #Exploitation
Understanding CVE-2022-22972 (VMWare Workspace One Access Auth Bypass) #CyberSecurity #Vulnerabilities #Research
Cloudflare Pages, part 3: The return of the secrets #CyberSecurity #Vulnerabilities #Cloudflare
Cloudflare Pages, part 2: The two privescs #CyberSecurity #Vulnerability #Exploitation
Cloudflare Pages, part 1: The fellowship of the secret #CyberSecurity #Vulnerabilities #Research