writeups.xyz writeups.xyz / Rémi Matasse (@_Remsio_)

Title Vulnerabilities Programs Authors
Finding A Pop Chain On A Common Symfony Bundle: Part 2
Phar Deserialization (CVE-2023-28115 Patch Bypass)
Finding A Pop Chain On A Common Symfony Bundle: Part 1
Partial File Read in phpList <= 3.6.12 (CVE-2023-35834)
PHP Filter Chains: File Read From Error-based Oracle
PHP Filters Chain: What Is It And How To Use It