Posts on rce
7 posts tagged rce.
-
Pwning Samsung TV Browser - Chrome V8 WASM Type Confusion bug
Samsung Tizen Smart TVFrom a single web page to a reverse shell on a Samsung QLED (Tizen 9, Chromium 120, ARM32) — exploiting a V8 WebAssembly-GC type confusion.
14 min read browser-exploitationtype-confusionmemory-corruption -
D-Link DIR600 Remote Code Execution Exploit Chain
D-Link DIR-600Complete exploit chain for D-Link DIR600 routers using CSRF, authentication bypass, and RCE to achieve persistent backdoor access via single HTTP link.
5 min read rcecsrffirmware -
CVE-2019-9194: elFinder Command Injection 1-Day Exploit
CVE-2019-9194 elFinderAnalysis and exploitation of CVE-2019-9194, a command injection vulnerability in elFinder, from discovery to functional exploit development.
6 min read rceweb-securityexploit-development -
CVE-2019-14670 - LimeSurvey TCPDF RCE via PHAR File
CVE-2019-14670 LimeSurveyRemote code execution in LimeSurvey < 3.17 through TCPDF PHAR deserialization attack, exploiting queXML PDF export functionality.
4 min read rceweb-securityexploit-development -
CVE-2018-16119: TP-Link Router Remote Code Execution
CVE-2018-16119 TP-Link WR1043NDDetailed analysis of CVE-2018-16119, a buffer overflow vulnerability in TP-Link WR1043ND routers leading to remote code execution via ROP chains.
14 min read rcememory-corruptionrop -
Mercury Browser Intent Hijacking: Android File Manager RCE
Mercury BrowserCritical intent hijacking vulnerability in Mercury Browser for Android enabling arbitrary file upload and code execution through file manager abuse.
5 min read rcemobilevulnerability-research -
Shellshock QMAIL Exploitation: SMTP Injection Attack
CVE-2014-6271 qmailAdvanced exploitation of CVE-2014-6271 (Shellshock) through QMAIL SMTP servers via MAIL FROM header injection for remote code execution.
5 min read rceexploit-development