PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Discovering a zero day and getting code execution on Mozilla's AWS Network

slcyber.io | research | #cloud | #zero-day | #vulnerability-research | #code-execution | #mozilla
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A zero day in WebPageTest's scripting functionality enabled code execution on Mozilla's AWS network and retrieval of IAM credentials.
Published
Collected

Related coverage

research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
vulnerability · horizon3.ai
[CVE-2021-38647] OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments
# OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments Zach Hanley September 16, 2021 Attack Blogs Overview On September 14, multiple vulnerabilities were discovered by researchers at...
research · slcyber.io
How practical is 100k requests per second? Introducing h3fuzz
Can HTTP/3 really give you 100k requests per second for content discovery? We tested it in a fork of ffuf and are releasing h3fuzz, a web UI for fuzzing.
research · slcyber.io
Leaking the Keys to the Kingdom: How a Single Slip Handed Over a Darknet Empire
# Leaking the Keys to the Kingdom: How a Single Slip Handed Over a Darknet Empire Get research alerts Share on social October 8, 2026 9 min read ### Table of Contents TOC Element The Sequence of...
research · slcyber.io
Zoom Zero Day Followup: Getting the RCE
Full RCE exploitation of the Zoom zero day: from initial ASLR bypass to shellcode execution via the GIPHY feature attack chain.
research · portswigger.net
Hiding payloads in Java source code strings
Java processes unicode escapes in string literals before parsing, so \u0022 can close a string and run code — Bambdas from untrusted sources can achieve RCE and must be validated first.
Back