Petrus Viet·Jan 10, 2024CVE-2023–50220 — Inductive Automation Ignition XML Deserialization to RCETrong năm 2023 mình có tìm được một số CVE của Ignition, hôm nay mình xin chia sẻ lại 1 bug trong số chúng. Dù không phải là bug có độ…A response icon1A response icon1
Petrus Viet·Oct 2, 2023[CVE-2023–38743] ManageEngine ADManager Command InjectionAuthenticated users with admin privileges can run an arbitrary command on the host machine in which ADManager Plus is installed.A response icon2A response icon2
Petrus Viet·Nov 25, 2022CVE-2022–43781 Bitbucket command injectionThere is a command injection vulnerability using environment variables in Bitbucket Server and Data Center.
Petrus Viet·Aug 9, 2022Dancing on the architecture of VMware Workspace ONE Access (ENG)I) Java web architecture ?A response icon1A response icon1
Petrus Viet·Aug 9, 2022Dancing on the architecture of VMware Workspace ONE Access (VI)I) Java web architecture ?
IntradahackingbyPetrus Viet·Apr 28, 2021Phân tích lỗ hổng RCE trên Gitlab (CVE-2021–22192)I) Building
![[CVE-2023–38743] ManageEngine ADManager Command Injection](https://miro.medium.com/v2/resize:fill:160:106/0*RQwS0Sc0FOJYOY-x.jpg)
![[CVE-2023–38743] ManageEngine ADManager Command Injection](https://miro.medium.com/v2/resize:fill:320:214/0*RQwS0Sc0FOJYOY-x.jpg)
