Security Code Review | writeups.xyz

Title	Vulnerabilities	Programs	Authors
CVE-2023-22524: RCE Vulnerability in Atlassian Companion for macOS	RCE MacOS Websockets Thick Client Security Code Review	Atlassian	Ron Masas (@RonMasas)
Securing our home labs: Frigate code review	OAuth Broken Authorization Broken Authentication SSRF CI/CD Supply Chain Attack Security Code Review	Frigate	Logan MacLaren Jorge Rosillo (@Jorge_ctf)
pfSense Security: Sensing Code Vulnerabilities with SonarCloud	Reflected XSS OS Command Injection Security Code Review	PfSense	Oskar Zeino-Mahmalat
SonicWall WXA – Authentication Bypass and Remote Code Execution Vulnerability	Authentication Bypass Hardcoded Credentials RCE Argument Injection Security Code Review	SonicWall	Adam Crosser
Argument injection vulnerability in multiple Atos Unify OpenScape products	Argument Injection RCE Authentication Bypass Security Code Review	Mitel (Atos Unify)	Armin Weihbold (@Koyaan5)
Multiple Vulnerabilities In Extreme Networks ExtremeXOS	Arbitrary File Read Arbitrary File Write SSRF RCE Privilege Escalation Local Privilege Escalation CSRF Security Code Review	Extreme Networks	David Yesland (@Daveysec)
Owncloud: details about CVE-2023-49103 and CVE-2023-49105	RCE Privilege Escalation Authentication Bypass Information Disclosure Security Code Review	OwnCloud	Charles Fol (@Cfreal_)
CVE-2023-37927 & CVE-2023-37928 - Multiple post-auth blind OS command and Python code injection vulnerabilities in Zyxel’s NAS326 devices	Code Injection OS Command Injection RCE Security Code Review	Zyxel	Gábor Selján (@GaborSeljan)
CVE-2023-4473 & CVE-2023-4474 - Authentication bypass and multiple blind OS command injection vulnerabilities in Zyxel’s NAS326 devices	Authentication Bypass OS Command Injection RCE Security Code Review	Zyxel	Gábor Selján (@GaborSeljan)
Gadgets chain in Laravel	Insecure Deserialization RCE Security Code Review	Undisclosed	Maxime Rinaudo (@MaxRio13)
Securing our home labs: Home Assistant code review	Insecure Deserialization CSRF RCE Code Injection Android IOS Security Code Review	Home Assistant	Alvaro Muñoz (@Pwntester)
Gadgets chain in WordPress	Insecure Deserialization RCE Security Code Review	Undisclosed	Maxime Rinaudo (@MaxRio13)
Visual Studio Code Security: Finding New Vulnerabilities in the NPM Integration (3/3)	RCE Argument Injection Security Code Review	Microsoft (VS Code)	Thomas Chauchefoin (@Swapgs) Paul Gerste
Magento Template Engine, A Story Of CVE-2022-24086	SSTI RCE Security Code Review	Magento	Antoine Gicquel (@Blueshhit)
Critical Variable Mass Assignment Vulnerability in Adobe ColdFusion (CVE-2023-44350)	Mass Assignment Security Code Review	Adobe (ColdFusion)	Brian (@Hoyahaxa)
Visual Studio Code Security: Markdown Vulnerabilities in Third-Party Extensions (2/3)	RCE Arbitrary Code Execution Markdown Injection Security Code Review	GitKraken Microsoft	Thomas Chauchefoin (@Swapgs) Paul Gerste
Not Your Stdout Bug - RCE in Cosmos SDK	RCE DoS Security Code Review	Cosmos	Maxwell Dulin (@Dooflin5)
Citrix Bleed: Leaking Session Tokens with CVE-2023-4966	Buffer Over-Read Memory Corruption Security Code Review	Citrix Systems	Dylan Pindur
crewjam/saml - IdP XSS Via Missing Binding Syntax Validation In ACS Location	XSS SAML Security Code Review	Crewjam	Francesco Lacerenza (@Lacerenza_fra)
Security Vulnerabilities in CasaOS	Authentication Bypass JWT RCE Security Code Review	CasaOS	Thomas Chauchefoin (@Swapgs)
Finding A Pop Chain On A Common Symfony Bundle: Part 2	Insecure Deserialization RCE Security Code Review	Doctrine-Bundle (Symfony Package)	Rémi Matasse (@_Remsio_)
[CVE-2023–38743] ManageEngine ADManager Command Injection	OS Command Injection Security Code Review	Zoho (ManageEngine)	Petrus Viet (@VietPetrus)
RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044)	Insecure Deserialization RCE Security Code Review	Progress (MOVEit Transfer)	Shubham Shah (@Infosec_au) Sean Yeoh (@Seanyeoh)
Exploiting ASP.NET TemplateParser — Part II: SharePoint (CVE-2023-33160)	RCE Security Code Review	Microsoft (Sharepoint)	Markus Wulftange (@Mwulftange)
Unzipping Dangers: OpenRefine Zip Slip Vulnerability	Zip Slip Attack Arbitrary Code Execution Path Traversal Security Code Review	OpenRefine	Stefan Schiller (@Scryh_)

Page 5 of 12