ILTOSEC

security research

iltosec

writeups & research

Blog

22 posts

categories

all CVE Ransomware File Upload Bypass Host Header Injection Authentication Bypass SSTI Command Injection RCE XSS Vulnerability Research Cloud AWS Injection Account Takeover Web Application Security Business Logic

tags

CMS CVE Ransomware File Upload Bypass SSRF Account Takeover RCE IDOR SQLi Snipe-IT Authorization Bypass Privilege Escalation Information Disclosure Default Credentials AWS S3 Payment Security Enumeration Misconfiguration

CVE·XSS · CMS·CVE

Django CMS 4.1.3 Stored XSS Vulnerability: Exploiting the Page Title Field

CVE-2024-11319 Discover the stored XSS vulnerability in Django CMS 4.1.3 that affects the Page Title field. Learn about the security risks, exploitation methods, and remediation strategies to protect your site from potential attacks. CVE-2024-11319 stored XSS vulnerability, Django CMS 4.1.3, CVE-2024-11319, JavaScript injection, Django CMS 4.1.3 CVE-2024-11319, admin panel security, Cross-Site Scripting, security patch, CVE, content security policy, input sanitization

5782 15 3 min read

Remote Code Execution by Bypassing Cloudflare: CVE-2022–29464 Analysis

Explore the detection and exploitation of CVE-2022-29464, a critical vulnerability in WSO2 products that allows remote code execution. Learn how to bypass Cloudflare's security and achieve shell access with a custom web shell. This article provides a detailed step-by-step guide, highlighting important lessons in web application security and the need for constant testing and updating of defense mechanisms.

2401 7 8 min read

← prev 1 2 3