PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Advisory: Oracle Opera Pre-Auth RCE (CVE-2023-21932)

slcyber.io | research | CVE-2023-21932 | #rce | #vulnerability-research | #advisory | #oracle | #opera | #cve-2023-21932
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# Advisory: Oracle Opera Pre-Auth RCE (CVE-2023-21932) Get research alerts Share on social ) April 30, 2023 2 min read ### Table of Contents TOC Element Summary Impact Affected Software Product...
CVE
CVE-2023-21932
Published
Collected

Related coverage

research · slcyber.io
[CVE-2023-21932] Exploiting an Order of Operations Bug to Achieve RCE in Oracle Opera
# Exploiting an Order of Operations Bug to Achieve RCE in Oracle Opera Get research alerts Share on social April 30, 2023 6 min read ### Table of Contents TOC Element If you work in the...
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
vulnerability · bishopfox.com
Oracle WebLogic Node Manager allows arbitrary configuration via UNC path
Bishop Fox advisory: WebLogic Node Manager 10.3.3 and earlier let unauthenticated attackers redirect its config and password files to an attacker-controlled UNC path, then run commands; fixed in 2011.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
Back