pentester.land· Feb 4, 2023· by Zakhar Fedotkin / d4d (@d4d89704243)

Memcached Command Injections at Pylibmc

Open Original Article ↗
Target Program: Flask-Session
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#CRLF injection#Memcached command injection#Insecure deserialization#RCE

More Writeups Like This

pentester.land

How I Chained 4 vulnerabilities on GitHub Enterprise, From SSRF Execution Chain to RCE!

by Orange Tsai (@orange_8361)
pentester.land

Attacking PowerShell CLIXML Deserialization

by Alexander Andersson
pentester.land

Getting code execution on Veeam through CVE-2023-27532

by Alain Mowat (@plopz0r)
pentester.land

3 ways to get Remote Code Execution in Kafka UI

by Michael Stepankin (@artsploit)