#vulnerability

@eva_security_blog how to pwn a billion dollar vc firm using inspect element #Security #Vulnerability #Hacking

@portswigger_research Fickle PDFs: exploiting browser rendering discrepancies #CyberSecurity #WebSecurity #Vulnerability

@searchlight_labs Why nested deserialization is harmful: Magento XXE (CVE-2024-34102) #CyberSecurity #Vulnerability #XXE

@sensepost From a GLPI patch bypass to RCE #CyberSecurity #Hacking #Vulnerability

@portswigger_research Introducing SignSaboteur: forge signed web tokens with ease #WebSecurity #CyberSecurity #Vulnerability

@searchlight_labs Digging for SSRF in NextJS apps #CyberSecurity #Vulnerability #WebDevelopment

@sensepost From Discovery to Disclosure: ReCrystallize Server Vulnerabilities #CyberSecurity #Vulnerability #OffensiveSecurity

@portswigger_research Making desync attacks easy with TRACE #CyberSecurity #WebSecurity #Vulnerability

@searchlight_labs Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762 #Cybersecurity #Vulnerability #Exploit

@portswigger_research Using form hijacking to bypass CSP #WebSecurity #CyberSecurity #Vulnerability

@0day_work CVE-2023-6294: popup-builder <= 4.2.6 Admin+ SSRF & File Read | 0day.work #CyberSecurity #Vulnerability #Exploit

@searchlight_labs High Signal Detection and Exploitation of Ivanti's Pulse Connect Secure Auth Bypass & RCE #CyberSecurity #Vulnerability #Exploit

@eva_security_blog how we owned almost all of america's fast food chains #CyberSecurity #Vulnerability #Exploit

@darknavy_blog Strengthening the Shield: MTE in Heap Allocators #Security #Vulnerability #Memory

@0day_work CVE-2023-6295: so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion | 0day.work #CyberSecurity #Vulnerability #Exploit

@darknavy_blog Exploiting the libwebp Vulnerability, Part 2: Diving into Chrome Blink #Cybersecurity #Vulnerability #Exploitation

@searchlight_labs Advisory: Progress WS_FTP RCE (CVE-2023-40044) #CyberSecurity #Vulnerability #Exploit

@searchlight_labs Advisory: Flarum LFI - CVE-2023-40033 #CyberSecurity #Vulnerability #Exploit

@searchlight_labs Leaking File Contents with a Blind File Oracle in Flarum #Cybersecurity #Vulnerability #Exploit

@searchlight_labs Finding and Exploiting Citrix NetScaler Buffer Overflow (CVE-2023-3519) (Part 3) #CyberSecurity #Vulnerability #Exploit

@searchlight_labs Advisory: Metabase Pre-Auth RCE (CVE-2023-38646) #CyberSecurity #Vulnerability #Exploit

@searchlight_labs Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646) #CyberSecurity #Vulnerability #Exploit

@searchlight_labs Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 3 - Getting to RCE) #CyberSecurity #Vulnerability #RCE

@searchlight_labs Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489) #CyberSecurity #Vulnerability #RCE

@searchlight_labs Advisory: Citrix Gateway Open Redirect and XSS (CVE-2023-24488) #CyberSecurity #Vulnerability #CVE

@searchlight_labs Reversing Citrix Gateway for XSS #Cybersecurity #Vulnerability #XSS

@searchlight_labs MOVEit Transfer RCE Part Two (CVE-2023-34362) #Cybersecurity #Vulnerability #Exploit

@searchlight_labs Patch Diffing Progress MOVEIt Transfer RCE (CVE-2023-34362) #CyberSecurity #Vulnerability #Exploit

@zhero_web_security DOS via cache poisoning on Mozilla #WebSecurity #CyberSecurity #Vulnerability

@searchlight_labs Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3 #CyberSecurity #Vulnerability #RCE

@searchlight_labs Exploiting an Order of Operations Bug to Achieve RCE in Oracle Opera #Cybersecurity #Vulnerability #Exploit

@searchlight_labs Advisory: Reflected Cross-Site Scripting in cPanel (CVE-2023-29489) #CyberSecurity #Vulnerability #CVE

@searchlight_labs Finding XSS in a million websites (cPanel CVE-2023-29489) #CyberSecurity #Vulnerability #XSS

@searchlight_labs RCE in Avaya Aura Device Services #CyberSecurity #Vulnerability #Exploit

@searchlight_labs Exploiting Hardcoded Keys to achieve RCE in Yellowfin BI #CyberSecurity #Vulnerability #Exploit

@searchlight_labs Advisory: Server Side Request Forgery in Jira Server (CVE-2022-26135) #CyberSecurity #Vulnerability #Jira

@searchlight_labs Abusing functionality to exploit a super SSRF in Jira Server (CVE-2022-26135) #CyberSecurity #Vulnerability #Jira

@searchlight_labs Advisory: Multiple Vulnerabilities in Progress Ipswitch WhatsUp Gold #CyberSecurity #Vulnerability #Exploit

@searchlight_labs Chaining vulnerabilities to criticality in Progress WhatsUp Gold #Cybersecurity #Vulnerability #Exploitation

@searchlight_labs Cloudflare Pages, part 2: The two privescs #CyberSecurity #Vulnerability #Exploitation