Back to directory

WRITEUP #2116

CVE-2022-41343

RCEInsecure deserializationPhar deserialization

by@TantoSecurity(Tanto Security team)

Program

dompdf

Published

Oct 6, 2022

Added to HackDex

Oct 6, 2022

Read Full Writeuphttps://tantosec.com/blog/cve-2022-41343/

▸ RELATED WRITEUPS

Attacking PowerShell CLIXML Deserialization

DeserializationInsecure deserialization

Getting code execution on Veeam through CVE-2023-27532

RCEInsecure deserialization

3 ways to get Remote Code Execution in Kafka UI

RCEInsecure deserialization

Shelltorch Explained: Multiple Vulnerabilities in Pytorch Model Server (Torchserve) (CVSS 9.9, CVSS 9.8) Walkthrough

Vulnerabilities in Open Source C2 Frameworks

RCEOS command injection

Built with ❤️ by Shubham Rawat