Skip to content
ZendTo NDay Vulnerability Hunting - Unauthenticated RCE in v5.24-3 <= v6.10-4
projectblack.io | vulnerability | #cloud | #rce | #unauthenticated | #type-juggling | #zendto | #nday
Summary
NDay research on ZendTo: an unsanitised tmp_name field gives unauthenticated RCE in v5.24-3 through v6.10-4, plus an MD5 type-juggling auth bypass. Many exposed instances remain unpatched.
- Published
- Collected