pentester.land· Sep 8, 2023· by watchTowr (@watchtowrcyber)

Orbeon Forms: The Final Form? On A Journey To RCE

Open Original Article ↗
Target Program: Orbeon
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#RCE#XSLT#XXE#XPATH

More Writeups Like This

pentester.land

FortiNAC - Just a few more RCEs

by Florian Hauser (@frycos)
pentester.land

LogicalDOC Vulnerability Disclosure

by Brett DeWall (@xbadbiddyx), Michael Rand
pentester.land

ClamAV Critical Patch Review

by ONEKEY (@onekey_sec)
pentester.land

Pwning ManageEngine — From Endpoint to Exploit: A deep dive into CVE-2021–42847

by Erik Wynter (@WynterErik)