/r/netsec - Information Security News & Discussion

Novel SSRF Technique Involving HTTP Redirect Loops

By: ／u／Mempodipper — June 23^rd 2025 at 11:05

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Loose Types Sink Ships: Pre-Authentication SQL Injection in Halo ITSM

By: ／u／Mempodipper — April 2^nd 2025 at 12:59

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Doing the Due Diligence: Analyzing the Next.js Middleware Bypass (CVE-2025-29927)

By: ／u／Mempodipper — March 24^th 2025 at 08:52

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218)

By: ／u／Mempodipper — March 6^th 2025 at 09:10

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Nginx/Apache Path Confusion to Auth Bypass in PAN-OS (CVE-2025-0108)

By: ／u／Mempodipper — February 12^th 2025 at 22:45

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

How an obscure PHP footgun led to RCE in Craft CMS

By: ／u／Mempodipper — December 19^th 2024 at 02:23

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Citrix Denial of Service: Analysis of CVE-2024-8534

By: ／u／Mempodipper — December 12^th 2024 at 13:31

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Leveraging An Order of Operations Bug to Achieve RCE in Sitecore 8.x - 10.x

By: ／u／Mempodipper — November 22^nd 2024 at 04:36

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Chaining Three Bugs to Access All Your ServiceNow Data

By: ／u／Mempodipper — July 11^th 2024 at 04:23

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Why nested deserialization is harmful: Magento XXE (CVE-2024-34102)

By: ／u／Mempodipper — June 26^th 2024 at 10:37

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Digging for SSRF in NextJS apps

By: ／u／Mempodipper — May 9^th 2024 at 22:39

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762

By: ／u／Mempodipper — March 17^th 2024 at 00:57

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

High Signal Detection and Exploitation of Ivanti's Pulse Connect Secure Auth Bypass & RCE

By: ／u／Mempodipper — January 19^th 2024 at 00:50

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Citrix Bleed: Leaking Session Tokens with CVE-2023-4966

By: ／u／Mempodipper — October 24^th 2023 at 12:05

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Leaking File Contents with a Blind File Oracle in Flarum

By: ／u／Mempodipper — August 29^th 2023 at 03:44

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Don’t you (forget NLP): Prompt injection with control characters in ChatGPT

By: ／u／Mempodipper — August 4^th 2023 at 05:47

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646)

By: ／u／Mempodipper — July 28^th 2023 at 01:32

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 2)

By: ／u／Mempodipper — July 24^th 2023 at 11:32

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway

By: ／u／Mempodipper — July 21^st 2023 at 08:35

submitted by /u/Mempodipper
[link] [comments]

/r/netsec - Information Security News & Discussion

Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489)

By: ／u／Mempodipper — July 11^th 2023 at 01:41

submitted by /u/Mempodipper
[link] [comments]