pentester.land· Jul 10, 2023· by Florian Hauser (@frycos)

From Blackbox .NET Remoting to Unauthenticated Remote Code Execution

Open Original Article ↗
Target Program: act!
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#RCE#.NET Remoting#Insecure deserialization

More Writeups Like This

pentester.land

Continuing the Citrix Saga: CVE-2023-5914 & CVE-2023-6184

by Dylan Pindur, Shubham Shah (@infosec_au), Adam Kues (@hash_kitten)
pentester.land

Attacking PowerShell CLIXML Deserialization

by Alexander Andersson
pentester.land

Getting code execution on Veeam through CVE-2023-27532

by Alain Mowat (@plopz0r)
pentester.land

3 ways to get Remote Code Execution in Kafka UI

by Michael Stepankin (@artsploit)