RCE on Spip and Root-Me, v2!
Target Program: SPIP
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by GhostCcamm (@GhostCcamm)Multiple Vulnerabilities In Cockpit CMS <= V2.5.2
pentester.land
by Bartłomiej Bergier (@_bergee_)How I found multiple critical bugs in Red Bull
pentester.land
by Quentin Roland (@croco_byte)Persistent PHP Payloads In PNGs: How To Inject PHP Code In An Image – And Keep It There !
pentester.land
by Tarikul Islam (@sa1tama0)