writeups.xyz / YAFPC — Unauthenticated Remote Code Execution

Submitter : c2a

Date: 14 January 2023

Bounty : undisclosed

Vulnerabilities :

• Authentication Bypass
• Hardcoded Credentials
• RCE

Programs :

• Undisclosed

Authors :

• Luke Paris

Link :
https://blog.paradoxis.nl/yafpc-unauthenticated-remote-code-execution-755bf9e4d7c1