PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Vulnerabilities in the Openfire Admin Console

swarm.ptsecurity.com | research | #vulnerability-research | #cve | #ssrf | #file-read | #openfire
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Two vulnerabilities in the Openfire Admin Console: an unauthenticated full-read SSRF through FaviconServlet (CVE-2019-18394) that can reach internal services, and a Windows-only arbitrary file read via PluginServlet path handling (CVE-2019-18393) that requires an admin account.
Published
Collected

Related coverage

research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
research · swarm.ptsecurity.com
Grafana 6.4.3 Arbitrary File Read
CVE-2019-19499 in Grafana 6.4.3: a rogue MySQL data source answers LOCAL INFILE requests to exfiltrate arbitrary files from the Grafana host, turning the 'add a data source' feature into an authenticated arbitrary file read.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · bishopfox.com
Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research
CVE disclosures are up 85% while exploitation barely moved. Bishop Fox breaks down four Nginx CVEs that looked critical but rarely affect real deployments.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
Back