From a GLPI patch bypass to RCE
Target Program: GLPI
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by Bartek NowotarskiExploiting authorization by nonce in WordPress plugins
pentester.land
by Harsh Jaiswal (@rootxharsh), Rahul Maini (@iamnoooob)Hacking Apple - SQL Injection to Remote Code Execution
pentester.land
by watchTowr (@watchtowrcyber)Form Tools Remote Code Execution: We Need To Talk About PHP
pentester.land
by X-C3LL (@TheXC3LL)