DEV Community

#rce

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
rConfig's Redis queue became an unauthenticated code path

rConfig's Redis queue became an unauthenticated code path

Comments
3 min read
A crafted regex runs code on GitLab servers

A crafted regex runs code on GitLab servers

Comments
2 min read
PHP2Shell: Two Critical PHP RCE Flaws and What to Do in the First Hour

PHP2Shell: Two Critical PHP RCE Flaws and What to Do in the First Hour

Comments
5 min read
After Plex2Shell: A Detection and Recovery Checklist for Media Servers You Cannot Rebuild Blindly

After Plex2Shell: A Detection and Recovery Checklist for Media Servers You Cannot Rebuild Blindly

Comments
4 min read
The Payoff Behind Plex2Shell: Why Home Media Servers Become Proxy and Mining Nodes

The Payoff Behind Plex2Shell: Why Home Media Servers Become Proxy and Mining Nodes

Comments
4 min read
Plex2Shell: Anatomy of a Four-Stage Chain From Open Port to Root-Level Code Execution

Plex2Shell: Anatomy of a Four-Stage Chain From Open Port to Root-Level Code Execution

Comments
4 min read
Why Internet-Facing Media Servers Stay Vulnerable: Plex Exposure in Numbers and Practice

Why Internet-Facing Media Servers Stay Vulnerable: Plex Exposure in Numbers and Practice

Comments
4 min read
CWE-73 in Practice: How Controlled File Paths Become Code Execution in Plex

CWE-73 in Practice: How Controlled File Paths Become Code Execution in Plex

Comments
4 min read
Four Moderate Flaws, One Critical Chain: What the Plex2Shell Disclosure Teaches Vulnerability Research

Four Moderate Flaws, One Critical Chain: What the Plex2Shell Disclosure Teaches Vulnerability Research

Comments
4 min read
Shadow Media Servers: When a Plex Box on the Corporate LAN Becomes an Incident

Shadow Media Servers: When a Plex Box on the Corporate LAN Becomes an Incident

Comments
4 min read
Remote Access by Default: Auditing the Plex Port Forwards That Made Plex2Shell Exploitable

Remote Access by Default: Auditing the Plex Port Forwards That Made Plex2Shell Exploitable

Comments
4 min read
Bedrock Structured Outputs, a Real Supply Chain Compromise, and Six More Things Demanding Your Attention

Bedrock Structured Outputs, a Real Supply Chain Compromise, and Six More Things Demanding Your Attention

Comments
5 min read
PHP Servers Still Vulnerable to RCE Despite Patches; Restart Web Services to Fix

PHP Servers Still Vulnerable to RCE Despite Patches; Restart Web Services to Fix

1
Comments
9 min read
HTTP2Shell Vulnerability in Python Servers Using Brotli Compression: Remote Code Execution Risk and Mitigation

HTTP2Shell Vulnerability in Python Servers Using Brotli Compression: Remote Code Execution Risk and Mitigation

Comments
13 min read
Mage-OS and BlockStrap: the same framework, a different release train

Mage-OS and BlockStrap: the same framework, a different release train

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
⌂ 换网址