Spip Preauth RCE 2024: Part 2, A Big Upload
Target Program: SPIP
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by Alain Mowat (@plopz0r)Getting code execution on Veeam through CVE-2023-27532
pentester.land
by RedTeam Pentesting (@RedTeamPT)Back To School - Exploiting A Remote Code Execution Vulnerability In Moodle
pentester.land
by Julien Ahrens (@MrTuxracer)WordPress GiveWP POP to RCE (CVE-2024-5932)
pentester.land
by Naveen Sunkavally