Back to directory
WRITEUP #677

Securing our home labs: Home Assistant code review

DeserializationInsecure deserializationCSRFRCECode injectionAndroidiOSSecurity code review
by@pwntester(Alvaro Muñoz)
Program
Home Assistant
Published
Nov 30, 2023
Added to HackDex
Jan 29, 2024
Read Full Writeuphttps://github.blog/2023-11-30-securing-our-home-labs-home-assistant-code-review/
RELATED WRITEUPS
Attacking PowerShell CLIXML Deserialization
DeserializationInsecure deserialization
Getting code execution on Veeam through CVE-2023-27532
RCEInsecure deserialization
Spip Preauth RCE 2024: Part 1, The Feather
RCECode injection
SSD Advisory – XenForo RCE Via CSRF
RCECSRF
Spip Preauth RCE 2024: Part 2, A Big Upload
RCEFile upload

Built with ❤️ by Shubham Rawat