pentester.land· Mar 3, 2021· by Nightwatch Cybersecurity (@nightwatchcyber)

Content Injection (RCE) in Yandex Browser for Android [2018]

Open Original Article ↗
Target Program: Yandex
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#MiTM

More Writeups Like This

unit42.paloaltonetworks.com

EMudhra Intermediate CA Certificates Compromised

by Unit 42
pentester.land

CVE-2024-38428 Wget Vulnerability: All you need to know

by Goni Golan
pentester.land

MITMing the Xbox 360 Dashboard for Fun and RCE

by lander (@landaire)
pentester.land

Drop the Mic (CVE-2019-1166)

by AJ Hammond (@4JMAN)