Pre-Auth RCE with CodeQL in Under 20 Minutes
Target Program: pgAdmin
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by Tomer Peled (@tomerpeled92)Can't Be Contained: Finding a Command Injection Vulnerability in Kubernetes
pentester.land
by Vu Thi Lan (@lanleft_), Nguyễn Hoàng Thạch (@hi_im_d4rkn3ss)The Last Breath of Our Netgear RAX30 Bugs - A Tragic Tale before Pwn2Own Toronto 2022
pentester.land
by Alain Mowat (@plopz0r)Getting code execution on Veeam through CVE-2023-27532
pentester.land
by Ryan Emmons