Spip Preauth RCE 2024: Part 1, The Feather
Target Program: SPIP
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by Gábor Selján (@GaborSeljan)CVE-2023-5372 - Post-auth blind Python code injection vulnerabilities in Zyxel’s NAS326 and NAS542 devices
pentester.land
by Gábor Selján (@GaborSeljan)CVE-2023-37927 & CVE-2023-37928 - Multiple post-auth blind OS command and Python code injection vulnerabilities in Zyxel’s NAS326 devices
pentester.land
by Alvaro Muñoz (@pwntester)Securing our home labs: Home Assistant code review
pentester.land
by Nguyễn Tiến Giang (@testanull)