1 min read
PyMedusa OS Command Injection
PyMedusa is a well known video library manager that many of us self hosted types may use to organize our libraries. I decided to give it a spin one day and found a classic OS…
tag
offensive security
5 posts
1 min read
Self-Hosted Security Part ? - Poor Rate Limiting in Organizr
Organizr is a self hosted application written in PHP that basically helps you self host other services at your home. It's nifty application with a surprisingly large amount of…
3 min read
Webmin CVE-2022-0824 RCE in Golang
I've continued my quest to translate exploits into Golang. Here is an RCE in Webmin due to broken access controls. Please see the following links for more information.…
1 min read
Guitar Pro Directory Traversal and Filename XSS
These were given CVE 2022 43263 and CVE 2022 43264. I found these vulnerabilities in the latest version of Guitar Pro (1.10.2) on the iPad and iPhone. Neither one is that great of…
1 min read
Sharpshooter, Python2.7, and Pip2 Installation
Newer versions of Linux may not come with any sort of Python 2 installed. I recently wanted to run Sharpshooter , which is a "payload creation framework for the retrieval and…