Avoiding unrestricted file upload - straight to the source
File uploads have become essential for numerous web applications, ranging from social media platforms to cloud storage services. They enable users to easily share
RESEARCH AREA
en
OsCommerce v4 RCE: Unveiling the file upload bypass threat
In my recent research, I identified a critical vulnerability in osCommerce v4, specifically a Remote Code Execution (RCE) vulnerability enabled by bypassing file upload
Windows Admin-to-Kernel Elevation of Privilege (CVE-2024-21338)
Abstract On February 13th, 2024, during the patch Tuesday, Microsoft disclosed the CVE-2024-21338 based on the security report made by Jan Vojtěšek
From a SSRF to the creation of gcp_enum
In this article, we will discuss a case of SSRF in a GCP environment and how exploiting this vulnerability led to the idea and
Error 404: Your Security Not Found – Tales of Web Vulnerabilities
Greetings to all, This article aims to provide insights and stories about vulnerabilities in web applications and their impacts. Throughout this text, I will
GLPI - SQL injection through dynamic reports
This post details the journey of our Research Team in uncovering a SQL Injection vulnerability in GLPI, an open-source ITSM tool predominantly used
BEERUS.APK - Spotlighting sandbox exfiltration
It is widely recognized that information storage poses a security risk, especially in the context of mobile devices. In the analyses conducted by our
Hunting for Nginx Alias Traversals in the wild
Nginx, a versatile web server pivotal to numerous internet infrastructures, has held a dominant market share since its inception in 2004, with widespread adoption
Coffee: A COFF loader made in Rust
Abstract COFF stands for Common Object File Format, it is the file format generated by compilers after the code-generation stage, they typically only