PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2023-27524] Apache Superset Part II: RCE, Credential Harvesting and More

horizon3.ai | vulnerability | CVE-2023-27524 | #rce | #vulnerability-research | #apache | #credential-harvesting | #horizon3 | #superset
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# Apache Superset Part II: RCE, Credential Harvesting and More Naveen Sunkavally September 6, 2023 Attack Blogs, Disclosures Apache Superset is a popular open source data exploration and...
CVE
CVE-2023-27524
Published
Collected

Related coverage

vulnerability · horizon3.ai
CVE-2023-27524: Insecure Default Configuration in Apache Superset Leads to Remote Code Execution
Apache Superset is an open source data visualization and exploration tool. It has over 50K stars on GitHub, and there are more than 3000 instances of it exposed to the Internet.
vulnerability · horizon3.ai
ManageEngine CVE-2022-47966 Technical Deep Dive
# ManageEngine CVE-2022-47966 Technical Deep Dive James Horseman January 19, 2023 Attack Blogs ## Introduction On January 10, 2023, ManageEngine released a security advisory for CVE-2022-47966...
vulnerability · horizon3.ai
Understanding Log4Shell: the Apache log4j2 Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046)
Understanding Log4Shell: the Apache log4j2 Remote Code Execution Vulnerability (CVE-2021-44228)…
vulnerability · horizon3.ai
[CVE-2021-41765] Multiple Vulnerabilities in ResourceSpace
Advisory for CVE-2021-41765, a critical SQL injection vulnerability leading to remote code execution, by the Horizon3 red team.
vulnerability · horizon3.ai
Apache CVE-2021-41773, CVE-2021-42013
We wanted to do something a little bit different with this post. Our vulnerability disclosures, exploit proof-of-concepts, and attack analysis blog posts have…
vulnerability · horizon3.ai
[CVE-2020-3952] Compromising vCenter via SAML Certificates
A common attack path that Horizon3 has identified across many of its customers is abusing access to the VMware vCenter Identity Provider (IdP) certificate.
Back