Back to directory

WRITEUP #2802

Meta's SparkAR RCE Via ZIP Path Traversal

RCEPath traversal

by@Fady_Othman(Fady Othman)

Bounty

2,500

Program

Meta / Facebook

Published

Apr 7, 2022

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://blog.fadyothman.com/metas-sparkar/

▸ RELATED WRITEUPS

Traccar 5 Remote Code Execution Vulnerabilities

RCEUnrestricted file upload

Path Traversal and Code Execution in CSLA.NET (CVE-2024-28698)

RCEPath traversal

Shelltorch Explained: Multiple Vulnerabilities in Pytorch Model Server (Torchserve) (CVSS 9.9, CVSS 9.8) Walkthrough

WhatsUp Gold Pre-Auth RCE WriteDataFile Primitive (CVE-2024-4883)

RCEPath traversal

WhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive (CVE-2024-4885)

RCEPath traversal

Built with ❤️ by Shubham Rawat