PWN – TravelGraph
Posted on 2024-09-24
High level GLIBC I/O operation exploit: Largebin Attack + FSOP
High level GLIBC I/O operation exploit: Largebin Attack + FSOP
XSS + RCE for PrestaShop & exploit SSTI on ChangeDetection.io
ORW ROP chain with magic gadgets to pwn a Sandbox
Exploit H2 Database for Java web app & abuse Apache Thrift
SQLPad RCE vulnerability & Froxlor exploit via Chrome remote debugging
There is no excerpt because this is a protected post.
LargeBin Attack is the future for heap exploitation.
RCE for CACTI monitor system, Auth bypass for Duplicati backup solution.
Skipper Proxy SSRF, Blazor traffic exploit, Privesc from process monitor
CVE-2023-41425 for WonderCMS RCE with malicious themes module.