Back to directory
WRITEUP #953

Adobe ColdFusion Pre-Auth RCE(s)

RCEColdFusionJNDI InjectionInsecure deserializationSecurity code reviewPatch diffing
by@rootxharsh(Harsh Jaiswal)
Program
Adobe (ColdFusion)
Published
Jul 12, 2023
Added to HackDex
Feb 27, 2024
Read Full Writeuphttps://blog.projectdiscovery.io/adobe-coldfusion-rce/
RELATED WRITEUPS
Getting code execution on Veeam through CVE-2023-27532
RCEInsecure deserialization
JNDI Injection Remote Code Execution via Path Manipulation in MemoryUserDatabaseFactory
RCEJNDI Injection
Attacking PowerShell CLIXML Deserialization
DeserializationInsecure deserialization
Spip Preauth RCE 2024: Part 2, A Big Upload
RCEFile upload
Back To School - Exploiting A Remote Code Execution Vulnerability In Moodle
RCESecurity code review

Built with ❤️ by Shubham Rawat