pentester.land· Jun 23, 2022· by Nguyễn Tiến Giang (@testanull), peterjson (@peterjson)

Miracle - One Vulnerability To Rule Them All

Open Original Article ↗
Target Program: Oracle
🎯 Vulnerability: Server-Side Request Forgery (SSRF)
💡 Defense Fix: Enforce URL whitelisting, block private IP ranges (10.0.0.0/8, 169.254.169.254), and mandate AWS IMDSv2 headers.
#Insecure deserialization#SSRF#RCE

More Writeups Like This

pentester.land

Shelltorch Explained: Multiple Vulnerabilities in Pytorch Model Server (Torchserve) (CVSS 9.9, CVSS 9.8) Walkthrough

by Gal Elbaz, Uri Katz, Guy Kaplan, Avi Lumelsky
pentester.land

Multiple vulnerabilities in Delmia Apriso 2017 to 2022

by Mehdi Elyassa, Vincent Herbulot
pentester.land

From open redirect to RCE in one week

by byq (@ByQwert)
pentester.land

How I Chained 4 vulnerabilities on GitHub Enterprise, From SSRF Execution Chain to RCE!

by Orange Tsai (@orange_8361)