2024-10-03 |
3 ways to get Remote Code Execution in Kafka UI |
Michael Stepankin |
|
2023-08-22 |
mTLS: When certificate authentication is done wrong |
Michael Stepankin |
|
2021-07-04 |
Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464) |
Michael Stepankin |
|
2021-07-04 |
Hidden OAuth attack vectors |
Michael Stepankin |
|
2021-07-04 |
Spring View Manipulation Vulnerability |
Michael Stepankin |
|
2021-07-04 |
Apache Solr Injection @ DEFCON 27 |
Michael Stepankin |
|
2021-07-04 |
Exploiting Spring Boot Actuators |
Michael Stepankin |
|
2021-07-04 |
Exploiting JNDI Injections in Java |
Michael Stepankin |
|
2019-08-11 |
[demo.paypal.com] Node.js code injection (RCE) |
#bugbounty ‧ Michael Stepankin |
|
2019-08-11 |
[manager.paypal.com] Remote Code Execution Vulnerability |
#bugbounty ‧ Michael Stepankin |
|
2019-05-08 |
[demo.paypal.com] Node.js code injection (RCE) |
|
|
2019-05-08 |
[manager.paypal.com] Remote Code Execution Vulnerability |
|
|