Curated security research, vulnerabilities, advisories and tools for practitioners.

slcyber.io

Security coverage collected from slcyber.io. (Page 3)

61.

Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway

research | 2023-07-04 00:00 | CVE-2023-3519 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #exploitation

62.

Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489)

research | 2023-07-04 00:00 | CVE-2023-24489 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #pre-auth

63.

Advisory: Citrix Gateway Open Redirect and XSS (CVE-2023-24488)

research | 2023-06-29 00:00 | CVE-2023-24488 | slcyber.io | Original ↗ | .md | #vulnerability-research | #xss | #citrix

64.

Reversing Citrix Gateway for XSS

research | 2023-06-29 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #xss | #reverse-engineering

65.

MOVEIt Transfer RCE Part Two (CVE-2023-34362)

research | 2023-06-13 00:00 | CVE-2023-34362 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #exploitation

66.

Patch Diffing Progress MOVEIt Transfer RCE (CVE-2023-34362)

research | 2023-06-07 00:00 | CVE-2023-34362 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #reverse-engineering

67.

Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3

research | 2023-05-10 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #microsoft

68.

Advisory: Oracle Opera Pre-Auth RCE (CVE-2023-21932)

research | 2023-04-30 00:00 | CVE-2023-21932 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #advisory

69.

[CVE-2023-21932] Exploiting an Order of Operations Bug to Achieve RCE in Oracle Opera

research | 2023-04-30 00:00 | CVE-2023-21932 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #exploitation

70.

Advisory: Reflected Cross-Site Scripting in cPanel (CVE-2023-29489)

research | 2023-04-26 00:00 | CVE-2023-29489 | slcyber.io | Original ↗ | .md | #vulnerability-research | #xss | #advisory

71.

Finding XSS in a million websites (cPanel CVE-2023-29489)

research | 2023-04-26 00:00 | CVE-2023-29489 | slcyber.io | Original ↗ | .md | #vulnerability-research | #xss | #cpanel

72.

Pre-Auth RCE in Aspera Faspex: Case Guide for Auditing Ruby on Rails

research | 2023-02-02 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #ruby

73.

RCE in Avaya Aura Device Services

research | 2023-02-01 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #exploitation

74.

Exploiting Hardcoded Keys to achieve RCE in Yellowfin BI

research | 2023-01-24 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #hardcoded-keys

75.

Exploiting Static Site Generators: When Static Is Not Actually Static

research | 2022-10-28 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #web-security

76.

Breaking Bitbucket: Pre Auth Remote Command Execution (CVE-2022-36804)

research | 2022-09-14 00:00 | CVE-2022-36804 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #pre-auth

77.

Advisory: Server Side Request Forgery in Jira Server (CVE-2022-26135)

research | 2022-06-26 00:00 | CVE-2022-26135 | slcyber.io | Original ↗ | .md | #vulnerability-research | #advisory | #jira

78.

Abusing functionality to exploit a super SSRF in Jira Server (CVE-2022-26135)

research | 2022-06-26 00:00 | CVE-2022-26135 | slcyber.io | Original ↗ | .md | #vulnerability-research | #exploitation | #jira

79.

Advisory: Multiple Vulnerabilities in Progress Ipswitch WhatsUp Gold

research | 2022-06-09 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #advisory

80.

Chaining vulnerabilities to criticality in Progress WhatsUp Gold

research | 2022-06-09 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #exploitation-chain

81.

Understanding CVE-2022-22972 (VMWare Workspace One Access Auth Bypass)

research | 2022-05-27 00:00 | CVE-2022-22972 | slcyber.io | Original ↗ | .md | #vulnerability-research | #vmware | #auth-bypass

82.

Cloudflare Pages, part 3: The return of the secrets

research | 2022-05-06 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #exploitation | #cross-tenant

83.

Cloudflare Pages, part 2: The two privescs

research | 2022-05-06 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #sandbox-escape | #slcyber

84.

Cloudflare Pages, part 1: The fellowship of the secret

research | 2022-05-06 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #secrets | #info-leak

85.

Advisory: DotCMS Remote Code Execution (CVE-2022-26352)

research | 2022-05-03 00:00 | CVE-2022-26352 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #advisory

86.

Hacking a Bank by Finding a 0day in DotCMS

research | 2022-05-03 00:00 | slcyber.io | Original ↗ | .md | #bug-bounty | #rce | #zero-day

87.

Advisory: VMWare Workspace One UEM SSRF - CVE-2021-22054

research | 2022-04-27 00:00 | CVE-2021-22054 | slcyber.io | Original ↗ | .md | #cloud | #vulnerability-research | #vmware

88.

Encrypting our way to SSRF in VMWare Workspace One UEM (CVE-2021-22054)

research | 2022-04-27 00:00 | CVE-2021-22054 | slcyber.io | Original ↗ | .md | #vulnerability-research | #vmware | #ssrf

89.

Diving Deeper into WatchGuard Pre-Auth RCE - CVE-2022-26318

research | 2022-04-13 00:00 | CVE-2022-26318 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #pre-auth

90.

Advisory: Dynamicweb Logic Flaw Leading to RCE (CVE-2022-25369)

vulnerability | 2022-02-20 00:00 | CVE-2022-25369 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #advisory

← Previous More →