writeups.xyz writeups.xyz / RFI

Title Vulnerabilities Programs Authors
Unmasking an RFI to LFI Escalation
Sony Bravia Remote Code Execution Disclosure
Hacking AI: System and Cloud Takeover via MLflow Exploit
Remote code execution in BIRT Viewer ≤ 4.12.0 (CVE-2023-0100)
How I found multiple critical bugs in Red Bull
URL filter bypass, RFI and XSS
How I escalated RFI into LFI
The Unusual Case of Status code- 301 Redirection to AWS Security Credentials Compromise
How I Hacked Fotor & Got “Nothing”
Hacking Magento eCommerce For Fun And 17.000 USD
How I got access to millions of [redacted] accounts