Arbitrary File Write | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOS	RCE Arbitrary File Write Arbitrary File Delete TCC Bypass	Apple (MacOS)	Mikko Kenttälä (@Turmio_)
Studying 0days: How we hacked Anki, the world's most popular flashcard app	RCE Components With Known Vulnerabilities Arbitrary File Read Arbitrary File Write XSS Security Code Review	Anki	Jacob Autumn Skerritt
CVE-2024-29511 – Abusing Ghostscript’s OCR device	Arbitrary File Read Arbitrary File Write Security Code Review	Ghostscript	Thomas Rinsma (@Thomasrinsma)
Probllama: Ollama Remote Code Execution Vulnerability (CVE-2024-37032) – Overview and Mitigations	AI RCE Path Traversal Arbitrary File Write	Ollama	Sagi Tzadik (@Sagitz_)
Preauth RCE on NVIDIA Triton Server	AI RCE Arbitrary File Write Memory Corruption	Nvidia	Zhiniang Peng (@Edwardzpeng)
Devfile file write vulnerability in GitLab	Path Traversal Arbitrary File Write RCE Parser Diffentials	GitLab	Joernchen (@Joernchen)
Who are you? The Importance of Verifying Message Origins	XSS PostMessage Arbitrary File Write RCE Security Code Review	Squidex	Stefan Schiller (@Scryh_)
I found 2 Zero-Days in popular Linux distros that includes Mint, Kali, Parrot	RCE Argument Injection Path Traversal Arbitrary File Write	Linux Mint (Xreader) MATE Desktop (Atril)	Febin Mon Saji
MobSF Remote code execution (via CVE-2024-21633)	Arbitrary File Write RCE	MobSF IBotPeaches (Apktool)	0x33c0unt (@Cybaqkebm)
Multiple Vulnerabilities In Extreme Networks ExtremeXOS	Arbitrary File Read Arbitrary File Write SSRF RCE Privilege Escalation Local Privilege Escalation CSRF Security Code Review	Extreme Networks	David Yesland (@Daveysec)
CVE-2023–4632: Local Privilege Escalation in Lenovo System Updater	Local Privilege Escalation Arbitrary File Write	Lenovo	Matt Nelson (@Enigma0x3)
LibreOffice Arbitrary File Write (CVE-2023-1883)	Arbitrary File Write Thick Client	LibreOffice	Gregor Kopf
Avast Anti-Virus privileged arbitrary file create on virus restore (CVE-2023-1586)	TOCTOU Arbitrary File Write Local Privilege Escalation	Avast NortonLifeLock	Denis Skvortcov (@Denis_Skvortcov)
Pimcore: One click, two security vulnerabilities	Path Traversal SQL Injection Arbitrary File Write RCE Security Code Review	Pimcore	Yaniv Nizry (@YNizry)
CS:GO: From Zero to 0-day	Game Hacking RCE Memory Corruption Arbitrary File Download Arbitrary File Write DLL Hijacking Privilege Escalation	Valve (CS:GO)	Felipe Alain
Avast Anti-Virus privileged arbitrary file create on virus quarantine (CVE-2023-1585 and CVE-2023-1587)	TOCTOU NULL Pointer Dereference Arbitrary File Write Local Privilege Escalation	Avast	Denis Skvortcov (@Denis_Skvortcov)
Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 2	Local Privilege Escalation TOCTOU Arbitrary File Write	Docker	Eviatar Gerzi
Pretalx Vulnerabilities: How to get accepted at every conference	Arbitrary File Read Arbitrary File Write RCE Security Code Review	Pretalx	Stefan Schiller (@Scryh_)
Parallels Desktop Toolgate Vulnerability	Path Traversal Arbitrary File Write Security Code Review Thick Client	Parallels	Alexandre Adamski (@NeatMonster_)
Attacking .NET Web Services	Security Code Review Arbitrary File Read Arbitrary File Write SSRF	Siemens	B0yd (@Rwincey)
A New Vector For “Dirty” Arbitrary File Write to RCE	Arbitrary File Write RCE	Undisclosed	Maxence Schmitt (@Maxenceschmitt) Lorenzo Stella (@Lorenzostella)
Froxlor v2.0.6 Remote Command Execution (CVE-2023-0315)	RCE Arbitrary File Write SSTI Security Code Review	Froxlor	Askar (@Mohammadaskar2)
Uploading the Webshell using filename of Content-Disposition Header Story!	Unrestricted File Upload Arbitrary File Write	Undisclosed	Yashar Mohagheghi
CVE-2021-43444 to 43449: Exploiting ONLYOFFICE Web Sockets for Unauthenticated Remote Code Execution	Websockets RCE Arbitrary File Write Path Traversal	OnlyOffice	Iain Wallace (@Strawp)
23000$ for Authentication Bypass & File Upload & Arbitrary File Overwrite	JWT Authentication Bypass Arbitrary File Write Unrestricted File Upload	Undisclosed	Souhaib Naceri (@H4x0r_dz)

Page 1 of 2