Tech Editorials #Advisory #Exim #RCE #CVE

Road to Exim RCE - Abusing Unsafe Memory Allocator in the Most Popular MTA

meh

2017-12-11

On 23 November, 2017, we reported two vulnerabilities to Exim. These bugs exist in the SMTP daemon and attackers do not need to be authenticated, including CVE-2017-16943 for a use-after-free (UAF) vulnerability, which leads to Remote Code Execution (RCE); and CVE-2017-16944 for a Denial-of-Service (DoS) vulnerability.

Tech Editorials #Advisory #Facebook #BugBounty #RCE #CVE

Advisory: Accellion File Transfer Appliance Vulnerability

orange

2016-09-22

According to a public data reconnaissance, there are currently 1,217 FTA servers online around the world, most of which are located in the US, followed by Canada, Australia, UK, and Singapore. Determine from the domain name and SSL Certificate of these servers, FTA is widely used by governmental bodies, educational institutions, enterprises, including several well-known brands.

Tech Editorials #Facebook #BugBounty #RCE #Backdoor #Reconnaissance #Pentest

How I Hacked Facebook, and Found Someone's Backdoor Script

orange

2016-04-21

Bug Bounty Hunting from Pentest View, and How to Find Remote Code Execution and Someone's Backdoor on Facebook Server...