Back to directory
WRITEUP #1618

Pre-Auth RCE in Aspera Faspex: Case Guide for Auditing Ruby on Rails

RCESecurity code reviewMissing authenticationInsecure deserialization
by@TheGrandPew(Maxwell Garrett)
Program
IBM
Published
Feb 2, 2023
Added to HackDex
Feb 3, 2023
Read Full Writeuphttps://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/
▸ RELATED WRITEUPS
Getting code execution on Veeam through CVE-2023-27532
RCEInsecure deserialization
Attacking PowerShell CLIXML Deserialization
DeserializationInsecure deserialization
Spip Preauth RCE 2024: Part 2, A Big Upload
RCEFile upload
Back To School - Exploiting A Remote Code Execution Vulnerability In Moodle
RCESecurity code review
WordPress GiveWP POP to RCE (CVE-2024-5932)
RCEPHP pop chain

Built with ❤️ by Shubham Rawat