Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.

Cybercrime Diaries


Cybercrime Diaries offers an incisive exploration of the Russian language cybercriminal ecosystem. It aims to study how these hackers organize, interact, and attack their victims.

Listed: