PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Remote code execution (RCE) 101

bugcrowd.com | vulnerability | #rce | #web-security | #ssti | #xxe | #command-injection | #vulnerability-101
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A primer on remote code execution that treats RCE as an impact rather than a single bug, surveying entry points from file upload and command injection to SQLi, XXE, SSTI, and SSRF.
Published
Collected

Related coverage

vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
vulnerability · bugcrowd.com
Infographic: What are Vulnerabilities?
Bugcrowd's Vulnerability 101 infographic explains what vulnerabilities are, citing ISO/IEC 29147:2018 and covering their causes, prevalence, how they are surfaced, and who finds them.
vulnerability · bugcrowd.com
How to Find XXE Bugs: Severe, Missed and Misunderstood
hakluke explains why XXE is severe and often missed by automated scanners. The guide covers XML entities and how XXE enables arbitrary file reads, SSRF, DoS, and sometimes RCE.
vulnerability · bugcrowd.com
Bugcrowd Releases Vulnerability Rating Taxonomy 1.9 with More Classifications for Credential Exposure
Bugcrowd releases VRT 1.9, adding granular Disclosure of Secrets ratings for credential exposure (P5-P1) and new SSTI, Broken Link Hijacking, Password Policy Bypass, and Flash-based CSRF entries.
Medium · vulnerability · depthfirst.com
Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419)
Netty's SMTP codec allowed CRLF injection in user input, letting attackers append forged mail commands that bypass SPF, DKIM and DMARC; depthfirst's agent found it, tracked as CVE-2025-59419.
Back