PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Adobe ColdFusion Pre-Auth RCE(s)

projectdiscovery.io | vulnerability | #bug-bounty | #rce
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

For the latest updates on CVE-2023-29300 / CVE-2023-38203 / CVE-2023-38204, see the updates section Introduction The Adobe ColdFusion, widely recognized for its robust web development capabilities, recently released a critical security update. The update specifically targeted three security issues, among them, CVE-2023-29300, a highly concerning pre-authentication Remote Code Execution (RCE) vulnerability. This vulnerability poses a significant threat, allowing malicious actors to execute arb
Published
Collected

Related coverage

vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
vulnerability · projectdiscovery.io
Introducing Neo Triage
On October 26, 2026 we're releasing Neo Triage, an autonomous engine for vulnerability triage. While other tools rank your backlog, Neo clears it.
vulnerability · projectdiscovery.io
Celebrating 2024: Securing your infrastructure with ProjectDiscovery
As 2024 comes to a close, we want to celebrate the milestones we’ve achieved together with our ProjectDiscovery community. Thanks to your trust and collaboration, here’s what we’ve accomplished this year on ProjectDiscovery. Platform growth 2k+ new vulnerability templates Identifying nearly 1k high-profile vulnerabilities affecting 600+ unique products—including Atlassian Confluence, GitLab, MLflow, Grafana, GitHub Enterprise, Ivanti, Fortinet, and Palo Alto Networks 50k+ cloud-based scans
vulnerability · projectdiscovery.io
July 2024 Newsletter
Welcome to the July edition of the ProjectDiscovery Community Newsletter. As summer moves along, so too have the team been hard at work improving and iterating on our tools and templates, alongside our valuable community contributions. Our updates from the last few weeks can be caught up on below, and of course keep looking out for the latest news and developments in vulnerability and cybersecurity technology as we continue to share them with you. We’ll also keep highlighting contributions from
vulnerability · projectdiscovery.io
Interactsh: Open-Source Solution for OOB Testing
What is Interactsh? Interactsh is a server-client implementation that allows users to identify blind Out-of-Band (OOB) vulnerabilities that may not be detected by conventional testing methods. Out-of-Band testing works by generating dynamic URLs, which when requested by the target, trigger a callback. This callback can be used to identify a vulnerability. Why did we build Interactsh? We wanted an Open-Source solution for Blind OOB testing. Interactsh simplifies the server setup process. It
Back