RCE Security

Julien Ahrens

Vulnerability Intel, ROP Gadget Hunter, Privacy Enthusiast, Full-time BugBounty hunter, @Hacker0x01 MVH, @SynackRedTeam member

HP Intelligent Management Center v5.1: Bypassing javax.faces.ViewState CSRF Protection

3 minute read

Have you read my last advisory about the HP Intelligent Management Center v5.1 E0202 topoContent.jsf Non-Persistent Cross-Site Scripting Vulnerability ? You ...

Photodex ProShow Producer Vulnerability #5: Insecure Library Loading

2 minute read

This is a sweet vulnerability, because all ProShow installations on all Microsoft Windows operating systems up to Windows 8 are exploitable!

Photodex ProShow Producer Vulnerability #4: SEH-Based Buffer Overflow (.PXT)

1 minute read

And here’s the next one. A SEH-based Buffer Overflow - exploitable on all 32bit windows systems out there :-). The application does not validate (again, but ...

Photodex ProShow Producer Vulnerability #3: Memory Corruption / Code Execution

2 minute read

Hello readers,

Yet Another Photodex ProShow Producer Code Execution Vulnerability

7 minute read

After my last advisory about the ProShow Producer application by Photodex and the nice Metasploit module created by mr.pr0n, I decided to dig deeper into thi...