Protected: Live Builder Takeover: Broken Access Control in us-core Leads to Full Site Compromise
There is no excerpt because this is a protected post.
Category: Research
Long-form vulnerability research and exploit development writeups.
Two roads to remote code execution in WildFly: a pre-auth CORBA deserialization bug and a JSON parser bypass
A deep security research writeup of two independent remote code execution paths into WildFly application servers: an unauthenticated IIOP/CORBA deserialization flaw, and a jackson-databind polymorphic typing bypass in the web tier. Full technical tracing, discovery story, and working proof of…