A New Attack Surface on MS Exchange Part 1 - ProxyLogon!
orange
2021-08-06ProxyLogon! The most severe and impactful vulnerability in the Exchange Server history ever.
All #SSRF Articles
Hacking Jenkins Part 1 - Play with Dynamic Routing (EN)
orange
2019-01-16This article is mainly about a brief security review on Jenkins in the last year. During this review, we found 5 vulnerabilities including: CVE-2018-1999002(Arbitrary file read vulnerability), CVE-2018-1000600(CSRF and missing permission checks in GitHub Plugin), CVE-2018-1999046(Unauthorized users could access agent logs), CVE-2018-1000861(Code execution through crafted URLs), CVE-2019-pending(Sandbox Bypass in Script Security and Pipeline Plugins)
