PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How Serialized Cookies Led to RCE on a WordPress Website

hackerone.com | blog | #bug-bounty | #rce | #nextcloud | #php | #web-security | #wordpress | #cookies | #insecure-deserialization
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A bug bounty write-up details an RCE in Nextcloud's WordPress site caused by insecure PHP deserialization in a custom theme, and explains how to identify, assess, and remediate such flaws.
Published
Collected

Related coverage

research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · aikido.dev
How to patch PHP2Shell with free Aikido Images
PHP2Shell is a pair of critical remote code execution (RCE) vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. Both score 9.2 on CVSS v4.0, and either one can let an unauthenticated attacker run code on a server that handles PHP requests. Cloudflare reports that exploitation has started.
blog · netspi.com
Getting Shells at Terminal Velocity with Wopper
Wopper is a NetSPI tool that automates WordPress code execution from admin credentials: it uploads, executes, obfuscates, and self-deletes PHP files in seconds, replacing manual plugin upload steps.
Critical · vulnerability · github.com
CVE-2026-111497: Unauthenticated WordPress RCE Exploit Chain PoC via Brotli Decoder Flaw
Demonstrates a reliable, real-world weaponization of the Brotli decoder memory corruption flaw in web application environments without requiring information leaks or debugging instrumentation. Highlights the critical risk of untrusted compressed streams in server-side HTTP clients.
vulnerability · wiz.io
[CVE-2026-111497] Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
Back