PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

FileFlows Vulnerabilities - SQL Injection by Decompiling .NET Code

projectblack.io | research | #sql-injection | #vulnerability | #decompilation | #dotnet | #fileflows
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Decompiling FileFlows' .NET binaries uncovered a SQL injection in the library-file search endpoint; simple quote replacement was insufficient to stop it on some supported databases.
Published
Collected

Related coverage

research · swarm.ptsecurity.com
From opcode to code: how AI chatbots can help with decompilation
Commercial PHP encoders serialize Zend VM opcodes; the author built a tool to extract and disassemble them, then used AI chatbots to help reconstruct readable source for vulnerability research.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · netlas.io
Hannibal Stealer: A Deep Technical Analysis
A deep technical analysis of Hannibal Stealer based on leaked source: its lineage from Sharp and TX Stealers, modular design, expanded data targeting and configurable exfiltration.
research · slcyber.io
A Novel Technique for SQL Injection in PDO's Prepared Statements
Assetnote details a novel SQL injection technique in PHP PDO prepared statements, exploitable under specific conditions including Postgres backends.
research · slcyber.io
Loose Types Sink Ships: Pre-Authentication SQL Injection in Halo ITSM
Assetnote discovers a pre-authentication SQL injection vulnerability in Halo ITSM, exploitable due to loose type handling in the codebase.
research · yokai.hakaisecurity.io
SQL Injection e Vulnerabilidade XSS no Centreon
Eu sou Daniel França Lima e sou pentester Jr e pesquisador de vulnerabilidades na Hakai Offensive Security. Com o objetivo de ajudar a comunidade de hackers, empresas e também aprimorar minhas habilidades, periodicamente busco por falhas em aplicativos do mercado com o objetivo de realizar divulgação responsável. Centreon é uma solução de monitoramento de ativos […]
Back