⤷ Title: PortSwigger Lab: Web shell upload via Content-Type restriction bypass
════════════════════════
𐀪 Author: sa0k0
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 18:34:05 GMT
════════════════════════
⌗ Tags: #content_type_bypass #file_upload #burpsuite #rce
════════════════════════
𐀪 Author: sa0k0
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 18:34:05 GMT
════════════════════════
⌗ Tags: #content_type_bypass #file_upload #burpsuite #rce
Medium
PortSwigger Lab: Web shell upload via Content-Type restriction bypass
Lab Information:
⤷ Title: Apache Struts 2 REST Plugin XStream Deserialization: When XML Requests Become Remote Code Execution
════════════════════════
𐀪 Author: EternalSec
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 06:24:01 GMT
════════════════════════
⌗ Tags: #vulnerability_assessment #rce #web_security #cybersecurity #apache_struts_2
════════════════════════
𐀪 Author: EternalSec
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 06:24:01 GMT
════════════════════════
⌗ Tags: #vulnerability_assessment #rce #web_security #cybersecurity #apache_struts_2
Medium
Apache Struts 2 REST Plugin XStream Deserialization: When XML Requests Become Remote Code Execution
A trusted XML request should never be able to decide which Java objects your server creates.
⤷ Title: From an Error Message to Remote Code Execution: Command Injection in a Ping Utility
════════════════════════
𐀪 Author: Neel Chauhan
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 12:45:49 GMT
════════════════════════
⌗ Tags: #penetration_testing #command_injection #bug_bounty #rce
════════════════════════
𐀪 Author: Neel Chauhan
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 12:45:49 GMT
════════════════════════
⌗ Tags: #penetration_testing #command_injection #bug_bounty #rce
Medium
From an Error Message to Remote Code Execution: Command Injection in a Ping Utility
CWE-78: Improper Neutralization of Special Elements used in an OS Command CVSS 3.1: 9.8 (Critical) — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
⤷ Title: PortSwigger Lab: Web shell upload via extension blacklist bypass
════════════════════════
𐀪 Author: sa0k0
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 17:20:29 GMT
════════════════════════
⌗ Tags: #file_upload #htaccess #rce #burpsuite #extension_blacklist
════════════════════════
𐀪 Author: sa0k0
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 17:20:29 GMT
════════════════════════
⌗ Tags: #file_upload #htaccess #rce #burpsuite #extension_blacklist
Medium
PortSwigger Lab: Web shell upload via extension blacklist bypass
Lab Information:
⤷ Title: Where Convenience Forgot to Lock the Door
════════════════════════
𐀪 Author: Aditya Patil
════════════════════════
ⴵ Time: Thu, 24 Sep 2026 17:40:15 GMT
════════════════════════
⌗ Tags: #ai_security #langflow #cybersecurity #rce #exploit
════════════════════════
𐀪 Author: Aditya Patil
════════════════════════
ⴵ Time: Thu, 24 Sep 2026 17:40:15 GMT
════════════════════════
⌗ Tags: #ai_security #langflow #cybersecurity #rce #exploit
Medium
Where Convenience Forgot to Lock the Door
What an unauthenticated RCE in Langflow taught me about hunting bugs in the age of agentic AI
⤷ Title: File Uploads Still Lead to RCE — What I Learned Breaking Avatar Upload on PortSwigger
════════════════════════
𐀪 Author: Gabriel Odusanya
════════════════════════
ⴵ Time: Fri, 25 Sep 2026 15:32:19 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #portswigger #rce_vulnerability #application_security #web_vulnerabilities
════════════════════════
𐀪 Author: Gabriel Odusanya
════════════════════════
ⴵ Time: Fri, 25 Sep 2026 15:32:19 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #portswigger #rce_vulnerability #application_security #web_vulnerabilities
Medium
File Uploads Still Lead to RCE — What I Learned Breaking Avatar Upload on PortSwigger
File upload looks harmless. “Just let users set a profile picture.” That one feature is still one of the most common ways a web app hands…
⤷ Title: Comment2Shell: WordPress’te Yorumlardan Sistemi Ele Geçirmeye Giden Yol (CVE-2026–93485)
════════════════════════
𐀪 Author: Dogukan İSPİRLİ
════════════════════════
ⴵ Time: Sat, 26 Sep 2026 20:29:07 GMT
════════════════════════
⌗ Tags: #wordpress #rce_vulnerability #remote_code_execution #wordpress_exploitation #xss_vulnerability
════════════════════════
𐀪 Author: Dogukan İSPİRLİ
════════════════════════
ⴵ Time: Sat, 26 Sep 2026 20:29:07 GMT
════════════════════════
⌗ Tags: #wordpress #rce_vulnerability #remote_code_execution #wordpress_exploitation #xss_vulnerability
Medium
Comment2Shell: WordPress’te Yorumlardan Sistemi Ele Geçirmeye Giden Yol (CVE-2026–93485)
WordPress son günlerin en çok konuşulan güvenlik açıklarından biri, sıradan bir blog yorumunu sunucu üzerinde komut çalıştırmaya…
⤷ Title: Citrix Zero-Day: How Vulnerable Is the Netherlands’ Digital Infrastructure?
════════════════════════
𐀪 Author: Jordi Been
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 11:43:26 GMT
════════════════════════
⌗ Tags: #citrix #rce #zero_day #cybersecurity
════════════════════════
𐀪 Author: Jordi Been
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 11:43:26 GMT
════════════════════════
⌗ Tags: #citrix #rce #zero_day #cybersecurity
Medium
Citrix Zero-Day: How Vulnerable Is the Netherlands’ Digital Infrastructure?
A critical vulnerability in Citrix NetScaler is putting Dutch hospitals and government organizations under pressure. Patients temporarily…
⤷ Title: TryHackMe: IDE— Walkthrough
════════════════════════
𐀪 Author: Gudrat Eyvazov
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 12:53:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_walkthrough #red_team #penetration_testing #rce
════════════════════════
𐀪 Author: Gudrat Eyvazov
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 12:53:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_walkthrough #red_team #penetration_testing #rce
Medium
TryHackMe: IDE— Walkthrough
Bu məqalədə TryHackMe platformasındakı IDE labının həll prosesini addım-addım izah edəcəm.
⤷ Title: PortSwigger Lab: Web shell upload via race condition
════════════════════════
𐀪 Author: sa0k0
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 13:22:18 GMT
════════════════════════
⌗ Tags: #rce #burpsuite #race_condition #file_upload #turbo_intruder
════════════════════════
𐀪 Author: sa0k0
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 13:22:18 GMT
════════════════════════
⌗ Tags: #rce #burpsuite #race_condition #file_upload #turbo_intruder
Medium
PortSwigger Lab: Web shell upload via race condition
Introduction