This article will analyze and summarize the recent critical CVEs (CVE-2023–20198, CVE-2023–20273) in Cisco IOS XE. Environment Setup A Cisco ISR 4300 router for research to analyze a 1day exploit for executing backdoor commands. …

Source :- https://www.praetorian.com/blog/recent-confluence-vulnerability-cve-2023-22515-and-atlassian-bamboo/ Overview Recently, a security team disclosed a vulnerability in Confluence called SafeParameterFilter, which allows an unauthenticated remote attacker to bypass XWork functionality to create new administrative user accounts. We took this opportunity to study another related Atlassian product, Atlassian Bamboo, to determine whether a similar vulnerability exists in…

Preface I have been looking at Intigriti, yeswehack, HackerOne and Bugcrowd bounty platforms recently. It is really uncomfortable to bypass WAF. I will record the bypass scenario. Preliminary testing When I first tried XSS, I found that the user’s input is displayed in the title. Generally speaking, it is to see if it…

Introduction KeePass is an open-source password management software. It is designed to help users store and manage their passwords and sensitive information for secure access to various online services and applications. KeePass provides a secure database where usernames, passwords, website links, additional instructions, and other custom fields can be stored. …

Introduction PyPI (Python Package Index) is Python’s official package indexing and distribution platform. It is a public, global repository for storing, publishing and installing Python packages and modules PyPI allows developers to package the Python code they write as reusable modules or libraries and publish them on PyPI for other developers…

Foreword As society pays more and more attention to security, various defensive programming or vulnerability mitigation measures are gradually added to the operating system, such as code signature, pointer signature, address randomization, isolated heap, etc. Many common memory corruption vulnerabilities are in Stable exploitation is often difficult under these mitigations. Therefore…

Introduction In this blog post, we dive into the intricacies of the Sudo Heap Overflow Vulnerability (CVE-2021–3156). On January 26, 2021, Qualys Research Labs discovered a flaw in sudo. When sudo parses the command line parameters, the truncation character is wrongly judged, which leads to the attacker maliciously constructing a payload…

Before testing to bypass WAF to execute remote code, first construct a simple and vulnerable remote code execution script, as shown in the figure:

The full name of JSONP is JSON with Padding, a solution based on JSON format to solve cross-domain request resources. Due to the limitation of the browser’s same-origin policy, the browser only allows XmlHttpRequest to request resources with the same current (domain name, protocol, port), and there is no restriction…