RCE | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Dangerous Import: SourceForge Patches Critical Code Vulnerability	Arbitrary File Read RCE Security Code Review	SourceForge Apache Allura	Stefan Schiller (@Scryh_)
Fixing Typos And Breaching Microsoft’s Perimeter	RCE CI/CD Supply Chain Attack	Microsoft	John Stawinski Adnan Khan (@Adnanthekhan)
CreateRCE — Yet Another Vulnerability in CreateUri	RCE Parsing Issue	Microsoft (Windows)	Ben Barnea (@Nachoskrnl)
Wiz Research finds architecture risks that may compromise AI-as-a-Service providers and consequently risk customer data; works with Hugging Face on mitigations	AI Malicious AI Model Cloud CI/CD RCE Insecure Deserialization Privilege Escalation Supply Chain Attack Cross-Tenant Vulnerability	Hugging Face	Shir Tamari (@Shirtamari) Sagi Tzadik (@Sagitz_)
From Discovery to Disclosure: ReCrystallize Server Vulnerabilities	Default Credentials LFI Authentication Bypass Privilege Escalation Unrestricted File Upload RCE	ReCrystallize Software	Paul Van Der Haas (@PvdH)
FlowFixation: AWS Apache Airflow Service Takeover Vulnerability and Why Neglecting Guardrails Puts Major CSPs at Risk	Cloud Account Takeover RCE Cookie Tossing Session Fixation	AWS Microsoft (Azure) Google (GCP)	Liv Matan (@TerminatorLM)
Micro Services, Major Headaches: Detecting Vulnerabilities in Erxes' Microservices	RCE Path Traversal Authentication Bypass Arbitrary File Overwrite GraphQL SSRF Security Code Review	Erxes	Paul Gerste
CVE-2024-1212: Unauthenticated Command Injection In Progress Kemp LoadMaster	OS Command Injection RCE Reverse Engineering	Progress (Kemp LoadMaster)	David Yesland (@Daveysec)
Java Deserialization Tricks	Insecure Deserialization RCE Security Code Review	Undisclosed	Clément Amic (@Loadlow)
Subdomain Fuzzing worth 35k bounty!	RCE Authentication Bypass SQL Injection	Undisclosed	Abdullah Nawaf / HX007 Orwa Atyat (@GodfatherOrwa)
I Love Lucee: Building Lucee Extensions for Remote Code Execution	RCE	Undisclosed	Will Vandevanter Juan Pablo Gomez Postigo
Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762	RCE Out-of-Bounds Write Memory Corruption Patch Diffing	Fortinet	Dylan Pindur
CVE-2024-21378 — Remote Code Execution in Microsoft Outlook	RCE Code Injection	Microsoft (Outlook)	Rich Wolferd Nick Landers (@Monoxgas)
Reply to calc: The Attack Chain to Compromise Mailspring	Mutation XSS RCE Electron CSS Exfiltration	Mailspring	Yaniv Nizry (@YNizry)
Leaking ObjRefs to Exploit HTTP .NET Remoting	Information Disclosure RCE .NET Remoting ASP.NET Security Code Review	Microsoft (.NET Framework)	Markus Wulftange (@Mwulftange)
Exploiting embedded mitel phones for unauthenticated remote code execution	RCE Reverse Engineering Buffer Overflow Memory Corruption Authentication Bypass OS Command Injection	Mitel	Kevin Joensen (@Ggisx)
How I hacked into Google’s internal corporate assets	Dependency Confusion RCE Supply Chain Attack	Google	Michael Hyndman
Continuing the Citrix Saga: CVE-2023-5914 & CVE-2023-6184	Reflected XSS SSO RCE .NET Remoting Insecure Deserialization Security Code Review	Citrix Systems	Dylan Pindur Shubham Shah (@Infosec_au) Adam Kues (@Hash_kitten)
Hello Lucee! Let us hack Apple again?	RCE Insecure Deserialization ColdFusion Security Code Review	Apple Lucee	Harsh Jaiswal (@Rootxharsh) Rahul Maini (@Iamnoooob)
Exploiting Empire C2 Framework	RCE Path Traversal Arbitrary File Overwrite	BC Security (Empire)	ACE Responder (@ACEResponder)
How I Hacked the Dutch Government: Exploiting an Innocent Image for Remote Code Execution	RCE Code Injection	Dutch Government	Mukund Bhuva (@MukundBhuva)
Form Tools Remote Code Execution: We Need To Talk About PHP	RCE LFI Security Code Review	Undisclosed	WatchTowr (@Watchtowrcyber)
How I got RCE in one of Bugcrowd's Public Programs	RCE OGNL Injection Apache Struts 2	Undisclosed	Yousef Mohamed Elsaid
Auth Bypass Round Two	SAML SSRF RCE Authentication Bypass Security Code Review	Ivanti	Dylan Pindur
Remote Code Execution by Bypassing Cloudflare: CVE-2022–29464 Analysis	Components With Known Vulnerabilities RCE WSO2 WAF Bypass	Undisclosed	Ali İltizar (@Alii76tt)

Page 4 of 35