PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-52598] SSRF & URI Validation Bypass in 2FAuth

xbow.com | vulnerability | CVE-2024-52598 | #cloud | #vulnerability-research | #open-source | #ssrf | #2fauth | #cve-2024-52598 | #uri-validation
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

XBOW's first 2FAuth report: an SSRF (CVE-2024-52598) in the OTP preview feature that bypasses MIME filtering to reach internal targets such as cloud metadata services.
CVE
CVE-2024-52598
Published
Collected

Related coverage

vulnerability · horizon3.ai
[CVE-2021-38647] OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments
# OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments Zach Hanley September 16, 2021 Attack Blogs Overview On September 14, multiple vulnerabilities were discovered by researchers at...
tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
vulnerability · xbow.com
Stored Cross-Site Scripting (XSS) in 2FAuth
Documents how XBOW reached stored XSS in 2FAuth (CVE-2024-52597) through SVG uploads in the QR-code decoder, after working around authentication, and validated it in a headless browser.
vulnerability · slcyber.io
High Fidelity Detection Mechanism for php2shell (CVE-2026-109618 and CVE-2026-109619)
The research team releases an open source tool php2shell-scanner which contains a high fidelity scanning mechanism to check for CVE-2026-109618 and CVE-2026-109619 across hosts.
vulnerability · yokai.hakaisecurity.io
[Pt-Br] Por Trás do Espelho: Investigando Vulnerabilidades no MagicMirror² (CVE-2026-63642, CVE-2026-63643)
# [Pt-Br] Por Trás do Espelho: Investigando Vulnerabilidades no MagicMirror² (CVE-2026-63642, CVE-2026-63643) RESEARCHER **Gabriel Alves** READ TIME**6 MINUTES** PUBLISHED**01 Oct 2026**...
Back