Security Code Review | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Unauthenticated SSRF on Havoc C2 teamserver via spoofed demon agent	SSRF Security Code Review	Havoc C2	Chebuya (@_Chebuya)
Chaining Three Bugs to Access All Your ServiceNow Data	RCE SSTI Security Code Review	ServiceNow	Adam Kues (@Hash_kitten)
CVE-2024-29511 – Abusing Ghostscript’s OCR device	Arbitrary File Read Arbitrary File Write Security Code Review	Ghostscript	Thomas Rinsma (@Thomasrinsma)
Securing Developer Tools: Unpatched Code Vulnerabilities in Gogs (2/2)	Path Traversal Arbitrary File Delete Argument Injection Security Code Review	Gogs	Thomas Chauchefoin (@Swapgs) Paul Gerste
WhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive (CVE-2024-4885)	RCE Path Traversal Security Code Review	Progress (WhatsUp Gold)	Sina Kheirkhah (@SinSinology)
WhatsUp Gold Pre-Auth RCE WriteDataFile Primitive (CVE-2024-4883)	RCE Path Traversal Security Code Review	Progress (WhatsUp Gold)	Sina Kheirkhah (@SinSinology)
WhatsUp Gold SetAdminPassword Privilege Escalation (CVE-2024-5009)	Local Privilege Escalation Security Code Review	Progress (WhatsUp Gold)	Sina Kheirkhah (@SinSinology)
SSD Advisory – Foscam R4M UDTMediaServer Buffer Overflow	Buffer Overflow Memory Corruption Security Code Review	Foscam	Yoseop Kim
Github Actions Exploitation: Untrusted Input	CI/CD Supply Chain Attack Security Code Review	Microsoft Excalidraw FreeRDP Angular AutoGPT Ant-Design Cypress Apache Doris	Hugo Vincent (@Hugow_vincent)
Securing Developer Tools: Unpatched Code Vulnerabilities in Gogs (1/2)	Argument Injection Security Code Review	Gogs	Thomas Chauchefoin (@Swapgs) Paul Gerste
Getting Unauthenticated Remote Code Execution On The Logsign Unified Secops Platform	RCE Authentication Bypass OS Command Injection Security Code Review	Logsign	Yulin Sung Mehmet INCE (@Mdisec)
Inside Xerox WorkCentre: Two Unauthenticated RCEs	RCE Local Privilege Escalation Printer Hacking Security Code Review	Xerox	Arseniy Sharoglazov (@_Mohemiv)
Why nested deserialization is harmful: Magento XXE (CVE-2024-34102)	Insecure Deserialization XXE Patch Diffing Security Code Review	Magento	Adam Kues (@Hash_kitten) Shubham Shah (@Infosec_au)
Looking for vulnerabilities in Strapi (CVE-2024-34065)	Authentication Bypass Open Redirect Security Code Review	Strapi	Mathieu Farrell
Zip Slip meets Artifactory: A Bug Bounty Story	Zip Slip Attack Path Traversal Security Code Review	JFrog (Artifactory)	Egidio Romano
From a GLPI patch bypass to RCE	RCE SQL Injection LFI Security Code Review	GLPI	Guilhem Rioux (@GuilhemRioux)
Re-moo-te Code Execution in Mailcow: Always Sanitize Error Messages	RCE Path Traversal Arbitrary File Overwrite XSS Security Code Review	Mailcow	Paul Gerste
CVE-2024-31735: LibEvent Library Memory Leak	Memory Leak DoS Security Code Review	LibEvent	Viktoriia Reitsenshtein
Molding Lies Into Reality \|\| Exploiting CVE-2024-4358	RCE Insecure Deserialization Authentication Bypass Security Code Review	Progress (Telerik)	Sina Kheirkhah (@SinSinology)
Wikimedia/svgtranslate 2.0.1 Remote Code Execution	RCE OS Command Injection Security Code Review	Wikimedia (SVGTranslate)	Valentin Lobstein (@Chocapikk_)
CVE-2024-21115: An Oracle Virtualbox LPE Used To Win Pwn2Own	Local Privilege Escalation Out-of-Bounds Write Memory Corruption Security Code Review	Oracle (VirtualBox)	Cody Gallagher (@Cogallag)
Digging for SSRF in NextJS apps	SSRF Security Code Review	Vercel (NextJS)	Adam Kues (@Hash_kitten) Shubham Shah (@Infosec_au)
Hacking Apple - SQL Injection to Remote Code Execution	SQL Injection RCE Security Code Review	Apple Mura CMS Masa CMS	Harsh Jaiswal (@Rootxharsh) Rahul Maini (@Iamnoooob)
Send()-ing Myself Belated Christmas Gifts - GitHub.com's Environment Variables & GHES Shell	RCE Unsafe Reflection Security Code Review	GitHub	Ngo Wei Lin (@Creastery)
20 Security Issues Found in Xiaomi Devices	Android OS Command Injection Insecure Intent XSS Memory Corruption Hardcoded Private Key Security Code Review	Xiaomi	Oversecured (@OversecuredInc)

Page 2 of 12