Back to directory
WRITEUP #153

We hacked Anki - 0 day exploit from studying someone elses flashcards

RCEComponents with known vulnerabilitiesArbitrary file readArbitrary file writeXSSSecurity code review
byJacob
Program
Anki
Published
Jul 24, 2024
Added to HackDex
Jul 30, 2024
Read Full Writeuphttps://skerritt.blog/anki-0day/
▸ RELATED WRITEUPS
Studying 0days: How we hacked Anki, the world's most popular flashcard app
RCEComponents with known vulnerabilities
CVE-2024-29511 – Abusing Ghostscript’s OCR device
OtherArbitrary file read
Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOS
RCEArbitrary file write
Getting code execution on Veeam through CVE-2023-27532
RCEInsecure deserialization
Spip Preauth RCE 2024: Part 2, A Big Upload
RCEFile upload

Built with ❤️ by Shubham Rawat