Back to directory
WRITEUP #740

Finding A Pop Chain On A Common Symfony Bundle: Part 2

DeserializationInsecure deserializationRCESecurity code review
by@_remsio_(Rémi Matasse)
Program
doctrine-bundle (Symfony package)
Published
Oct 11, 2023
Added to HackDex
Dec 26, 2023
Read Full Writeuphttps://www.synacktiv.com/publications/finding-a-pop-chain-on-a-common-symfony-bundle-part-2
RELATED WRITEUPS
Attacking PowerShell CLIXML Deserialization
DeserializationInsecure deserialization
Getting code execution on Veeam through CVE-2023-27532
RCEInsecure deserialization
Spip Preauth RCE 2024: Part 2, A Big Upload
RCEFile upload
Back To School - Exploiting A Remote Code Execution Vulnerability In Moodle
RCESecurity code review
WordPress GiveWP POP to RCE (CVE-2024-5932)
RCEPHP pop chain

Built with ❤️ by Shubham Rawat