pentester.land· Aug 25, 2023· by watchTowr (@watchtowrcyber)🔍 CVE-2023-36844

CVE-2023-36844 And Friends: RCE In Juniper Devices

Open Original Article ↗
Target Program: Juniper
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#RCE#Missing authentication#Arbitrary file upload#Security code review#CVE-2023-36844

More Writeups Like This

pentester.land

Exploiting authorization by nonce in WordPress plugins

by Bartek Nowotarski
pentester.land

Pre-Auth RCE in Aspera Faspex: Case Guide for Auditing Ruby on Rails

by Maxwell Garrett (@TheGrandPew), Shubham Shah (@infosec_au)
pentester.land

PandoraFMS - Pre-Auth Remote Code Execution

by esj4y (@esj4y)
pentester.land

Getting code execution on Veeam through CVE-2023-27532

by Alain Mowat (@plopz0r)