Intro to Open-source Bug Bounty
Target Program: Mailtrain
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by Chris McCurley (@chrisrmccurley)Directory Traversal, SQL Injection and Server-Side Request Forgery
pentester.land
by Naveen SunkavallyTraccar 5 Remote Code Execution Vulnerabilities
pentester.land
by Louis Wolfers (@TG91aXMK), Quentin Roland (@croco_byte)Oracle Retail Xstore Suite: Pre-authenticated Path Traversal
pentester.land
by Sam Pizzey