- Published on
The Injection machine is vulnerable to Command Injection (CVE-2022-36231) and privilege escalation via sudo.
All Posts
All Posts
- linux (23)
- hacking-club (23)
- rce (7)
- sqli (5)
- lfi (3)
- bola (2)
- command-injection (2)
- idor (2)
- ssti (2)
- ssrf (2)
- rfi (2)
- api-rest (1)
- cve-2023-33733 (1)
- race-condition (1)
- lfr (1)
- graphql (1)
- code-injection (1)
- insecure-desseralization (1)
- windows (1)
- cloud (1)
- cve-2022-36231 (1)
- cve-2022-29464 (1)
- function-injection (1)
- cve-2022-24112 (1)
- cve-2024-29510 (1)
- seo-poisoning (1)
- xxe (1)
- Published on
Application has a BOLA vulnerability, unauthorized file access, SSH key usage, privilege escalation via SUID, and code execution.- Published on
The application has vulnerabilities of Local File Inclusion (LFI), Remote Code Execution (RCE) via Jenkins, and privilege escalation using a SUID binary.- Published on
The application has remote code execution (RCE) vulnerabilities in the ReportLab library and privilege escalation via "Shared Library Hijacking".- Published on
The application has the following vulnerabilities: endpoint enumeration via FUZZ, SQL Injection, remote command execution (RCE), and privilege escalation via Linux capabilities.