RCE | writeups.xyz

Title	Vulnerabilities	Programs	Authors
When Prompts Go Rogue: Analyzing a Prompt Injection Code Execution in Vanna.AI	AI LLM RCE Prompt Injection	Vanna.ai	Natan Nehorai
Probllama: Ollama Remote Code Execution Vulnerability (CVE-2024-37032) – Overview and Mitigations	AI RCE Path Traversal Arbitrary File Write	Ollama	Sagi Tzadik (@Sagitz_)
From a GLPI patch bypass to RCE	RCE SQL Injection LFI Security Code Review	GLPI	Guilhem Rioux (@GuilhemRioux)
Preauth RCE on NVIDIA Triton Server	AI RCE Arbitrary File Write Memory Corruption	Nvidia	Zhiniang Peng (@Edwardzpeng)
Brand-new prototype pollution gadget in MongoDB leading to RCE	RCE Prototype Pollution	MongoDB	Vuusale
Iconv, Set The Charset To RCE: Exploiting The Glibc To Hack The PHP Engine (Part 2)	RCE Buffer Overflow Memory Corruption	GNU C Library (Glibc)	Charles Fol (@Cfreal_)
Re-moo-te Code Execution in Mailcow: Always Sanitize Error Messages	RCE Path Traversal Arbitrary File Overwrite XSS Security Code Review	Mailcow	Paul Gerste
Abusing title reporting and tmux integration in iTerm2 for code execution	RCE Escape Sequence Injection	ITerm2	Vin01
What’s in a Name? Writing custom DNS tunnelling protocol, exploiting unexpected AWS Lambda misconfiguration – in a web app Pen test (Part 1)	RCE AWS Lambda Misconfiguration	Undisclosed	Sunny Chau
Molding Lies Into Reality \|\| Exploiting CVE-2024-4358	RCE Insecure Deserialization Authentication Bypass Security Code Review	Progress (Telerik)	Sina Kheirkhah (@SinSinology)
Iconv, Set The Charset To RCE: Exploiting The Glibc To Hack The PHP Engine (Part 1)	RCE Buffer Overflow Memory Corruption	GNU C Library (Glibc)	Charles Fol (@Cfreal_)
The risk in malicious AI models: Wiz Research discovers critical vulnerability in AI-as-a-Service provider, Replicate	AI Malicious AI Model RCE Lateral Movement TCP Injection	Replicate	Shir Tamari (@Shirtamari) Sagi Tzadik (@Sagitz_)
Wikimedia/svgtranslate 2.0.1 Remote Code Execution	RCE OS Command Injection Security Code Review	Wikimedia (SVGTranslate)	Valentin Lobstein (@Chocapikk_)
Abusing url handling in iTerm2 and Hyper for code execution	RCE Escape Sequence Injection	ITerm2 Vercel (Hyper)	Vin01
My LLM Bug Bounty Journey on Hugging Face Hub via Protect AI	LLM Insecure Deserialization RCE	Hugging Face Protect AI	Peng Zhou
Exploit Archeology - Exploiting an old unknown Server Side Browser	RCE Memory Corruption	Undisclosed	Alex Chapman (@Ajxchapman)
Hacking Apple - SQL Injection to Remote Code Execution	SQL Injection RCE Security Code Review	Apple Mura CMS Masa CMS	Harsh Jaiswal (@Rootxharsh) Rahul Maini (@Iamnoooob)
Lethal Injection: How We Hacked Microsoft's Healthcare Chat Bot	Chatbot Sandbox Escape Cross-Tenant Vulnerability RCE Memory Leak	Microsoft	Yanir Tsarimi (@Yanir_)
LLM Pentest: Leveraging Agent Integration For RCE	LLM Prompt Leaking Prompt Injection RCE Code Injection	Undisclosed	Pedro Henrique Lima
Send()-ing Myself Belated Christmas Gifts - GitHub.com's Environment Variables & GHES Shell	RCE Unsafe Reflection Security Code Review	GitHub	Ngo Wei Lin (@Creastery)
Devfile file write vulnerability in GitLab	Path Traversal Arbitrary File Write RCE Parser Diffentials	GitLab	Joernchen (@Joernchen)
CVE-2024-2887: A Pwn2Own Winning Bug In Google Chrome	V8 JavaScript Engine WebAssembly JS Sandbox Breakout Browser Hacking Memory Corruption RCE	Google (Chrome) Microsoft (Edge)	Manfred Paul (@_Manfp)
Poppin shells with Okta Verify on Windows	RCE DLL Hijacking Local Privilege Escalation	Okta	B0yd (@Rwincey)
Code Injection to RCE with .NET	Code Injection RCE	Undisclosed	Phil Thomas
Hello: I’m your Domain Admin and I want to authenticate against you	RCE Privilege Escalation Authentication Coercion Active Directory NTLM Internal Pentest	Microsoft	Ap (@Decoder_it)

Page 3 of 35