pentester.land· Jun 3, 2024· by Sina Kheirkhah (@SinSinology)🔍 CVE-2024-4358

Molding Lies Into Reality || Exploiting CVE-2024-4358

Open Original Article ↗
Target Program: Progress (Telerik)
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#RCE#Insecure deserialization#Authentication bypass#Security code review#CVE-2024-4358

More Writeups Like This

pentester.land

Getting code execution on Veeam through CVE-2023-27532

by Alain Mowat (@plopz0r)
pentester.land

Getting Unauthenticated Remote Code Execution On The Logsign Unified Secops Platform

by Yulin Sung, Mehmet INCE (@mdisec)
pentester.land

Micro Services, Major Headaches: Detecting Vulnerabilities in Erxes' Microservices

by Paul Gerste
pentester.land

Java Deserialization Tricks

by Clément Amic (@loadlow)