/r/netsec - Information Security News & Discussion

Nginx/Apache Path Confusion to Auth Bypass in PAN-OS (CVE-2025-0108)

By: ／u／Mempodipper — February 12^th 2025 at 22:45

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

How an obscure PHP footgun led to RCE in Craft CMS

By: ／u／Mempodipper — December 19^th 2024 at 02:23

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Citrix Denial of Service: Analysis of CVE-2024-8534

By: ／u／Mempodipper — December 12^th 2024 at 13:31

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Leveraging An Order of Operations Bug to Achieve RCE in Sitecore 8.x - 10.x

By: ／u／Mempodipper — November 22^nd 2024 at 04:36

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Chaining Three Bugs to Access All Your ServiceNow Data

By: ／u／Mempodipper — July 11^th 2024 at 04:23

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Why nested deserialization is harmful: Magento XXE (CVE-2024-34102)

By: ／u／Mempodipper — June 26^th 2024 at 10:37

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Digging for SSRF in NextJS apps

By: ／u／Mempodipper — May 9^th 2024 at 22:39

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762

By: ／u／Mempodipper — March 17^th 2024 at 00:57

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

High Signal Detection and Exploitation of Ivanti's Pulse Connect Secure Auth Bypass & RCE

By: ／u／Mempodipper — January 19^th 2024 at 00:50

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Citrix Bleed: Leaking Session Tokens with CVE-2023-4966

By: ／u／Mempodipper — October 24^th 2023 at 12:05

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Leaking File Contents with a Blind File Oracle in Flarum

By: ／u／Mempodipper — August 29^th 2023 at 03:44

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Don’t you (forget NLP): Prompt injection with control characters in ChatGPT

By: ／u／Mempodipper — August 4^th 2023 at 05:47

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646)

By: ／u／Mempodipper — July 28^th 2023 at 01:32

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 2)

By: ／u／Mempodipper — July 24^th 2023 at 11:32

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway

By: ／u／Mempodipper — July 21^st 2023 at 08:35

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489)

By: ／u／Mempodipper — July 11^th 2023 at 01:41

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

hacking root EPP servers to take control of zones

By: ／u／Mempodipper — June 13^th 2023 at 05:07

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3

By: ／u／Mempodipper — May 11^th 2023 at 08:56

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Exploiting an Order of Operations Bug to Achieve RCE in Oracle Opera

By: ／u／Mempodipper — May 2^nd 2023 at 04:19

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Finding XSS in a million websites (cPanel CVE-2023-29489)

By: ／u／Mempodipper — April 27^th 2023 at 01:12

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

assetnote/ghostbuster: Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.

By: ／u／Mempodipper — April 30^th 2023 at 12:08

submitted by /u/Mempodipper
[link] [comments]