pentester.land· Dec 4, 2023· by Charles Fol (@cfreal_)🔍 CVE-2023-49103

Owncloud: details about CVE-2023-49103 and CVE-2023-49105

Open Original Article ↗
Target Program: ownCloud
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#RCE#Privilege escalation#Authentication bypass#Information disclosure#Security code review#CVE-2023-49103#CVE-2023-49105

More Writeups Like This

pentester.land

From Zero to Hero Part 1: Bypassing Intel DCM’s Authentication by Spoofing Kerberos and LDAP Responses (CVE-2022-33942)

by Julien Ahrens (@MrTuxracer)
pentester.land

Vulnerabilities in Open Source C2 Frameworks

by Laurence Tennant
pentester.land

Getting Unauthenticated Remote Code Execution On The Logsign Unified Secops Platform

by Yulin Sung, Mehmet INCE (@mdisec)
pentester.land

Molding Lies Into Reality || Exploiting CVE-2024-4358

by Sina Kheirkhah (@SinSinology)