Ayrix Bytes

🔹 EmojiDeploy: Smile! Your Azure web service just got RCE’d ._. 📆 2023-01-19 #️⃣ #RCE

🔹 The easiest way I used to bypass an admin panel 📆 2023-01-19 #️⃣ #HTTP_request_smuggling

🔹 CVE-2022-47966 SAML ShowStopper 📆 2023-01-19 #️⃣ #SAML

🔹 CVE-2022-35690: Unauthenticated RCE In Adobe ColdFusion 📆 2023-01-19 #️⃣ #RCE

🔹 Two Factor Authentication Bypass On Facebook 📆 2023-01-20 #️⃣ #MFA_bypass

🔹 Technical Advisory – Multiple Vulnerabilities in the Galaxy App Store (CVE-2023-21433, CVE-2023-21434) 📆 2023-01-20 #️⃣ #Android

🔹 CSRF + Stored XSS Leading to Full Account Takeover 📆 2023-01-20 #️⃣ #Stored_XSS

🔹 Bypassing Cloudflare WAF: XSS via SQL Injection 📆 2023-01-21 #️⃣ #Reflected_XSS

🔹 Reflected XSS Leads to 3,000$ Bug Bounty Rewards from Microsoft Forms 📆 2023-01-22 #️⃣ #Reflected_XSS

🔹 How i Hacked Scopely with “Sign in with Google” 📆 2023-01-23 #️⃣ #Account_takeover

🔹 Activation Context Cache Poisoning: Exploiting CSRSS For Privilege Escalation 📆 2023-01-23 #️⃣ #Local_Privilege_Escalation

🔹 CVE from 2018 Strikes Again 📆 2023-01-23 #️⃣ #RCE

🔹 CrossTalk and Secret Agent: Two Attack Vectors on Okta's Identity Suite 📆 2023-01-23 #️⃣ #Insecure_storage_of_sensitive_information

🔹 Using 0days to Protect the United Nations 📆 2023-01-24 #️⃣ #RCE

🔹 Exploiting Hardcoded Keys to achieve RCE in Yellowfin BI 📆 2023-01-24 #️⃣ #RCE

🔹 MyBB <= 1.8.31: Remote Code Execution Chain 📆 2023-01-25 #️⃣ #RCE

🔹 Kamailio’s exec module considered harmful 📆 2023-01-26 #️⃣ #OS_command_injection

🔹 OpenEMR - Remote Code Execution in your Healthcare System 📆 2023-01-26 #️⃣ #RCE

🔹 Ransacking your password reset tokens 📆 2023-01-26 #️⃣ #Account_takeover

🔹 Disclosing Facebook page admins by playing a game 📆 2023-01-28 #️⃣ #Logic_flaw