PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[EN] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration

yokai.hakaisecurity.io | research | #rce | #vulnerability-research | #research
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

With the widespread adoption of workflow automation platforms in corporate environments, these solutions have come to play a critical role in system integration and the processing of sensitive data. In this context, the security of the mechanisms responsible for executing custom code becomes an essential factor. This study presents a security analysis of Node-RED, focusing […]
Published
Collected

Related coverage

research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
research · yokai.hakaisecurity.io
Malicious MSI – Tornando o MSI em uma arma
Abstract Este artigo examina o formato Windows Installer (MSI) sob a perspectiva da segurança da informação, explorando como sua estrutura e funcionalidades podem ser exploradas para fins maliciosos. Através da análise detalhada de amostras recentes de malware, incluindo LegionLoader, RemcosRAT, SilverFox e MetaStealer, o estudo demonstra as diversas técnicas utilizadas por atores maliciosos para weaponizar […]
research · yokai.hakaisecurity.io
O lado obscuro do JWT: Explorando vulnerabilidades em Tokens.
Muitas aplicações modernas utilizam JSON Web Tokens (JWTs) para autenticar e autorizar usuários em suas funcionalidades. Neste artigo, exploraremos vulnerabilidades em JWTs que podem comprometer o sistema de assinatura, permitindo que um atacante autentique-se e eleve seus privilégios em uma aplicação vulnerável. Conhecendo o JSON Web Token Antes de explorar uma vulnerabilidade em um artefato, […]
Back