RCE Security

Julien Ahrens

Vulnerability Intel, ROP Gadget Hunter, Privacy Enthusiast, Full-time BugBounty hunter, @Hacker0x01 MVH, @SynackRedTeam member

Easy File Management Web Server v5.3 Exploit-Kung Fu

8 minute read

During the last few days a lot of nice Remote Exploits have been released over at Exploit-DB by one of my followers Harold aka superkojiman targeting applica...

Magix Bug Bounty: magix.com (RCE, SQLi) and xara.com (LFI, XSS)

2 minute read

The German Magix Software GmbH rewarded me with a Hall of Fame listing and a free Magix Music Maker 2014 Premium license for my reports of several serious se...

CVE-2014-2087: Free Download Manager CDownloads_Deleted:: UpdateDownload() Remote Code Execution

3 minute read

I’ve discovered another 0day Remote Code Execution flaw in a CNET.com Top10 software of its category, which has been downloaded more than 6 million times rig...

CVE-2014-2206: GetGo Download Manager HTTP Response Header Buffer Overflow Remote Code Execution

7 minute read

I’ve published another security advisory about a remote code execution vulnerability with a CVSS score of 10,0 today. Affected are all available versions of ...

VideoCharge Studio v2.12.3.685 GetHttpResponse() Remote Code Execution

19 minute read

I’m focusing on exploit development at the moment and it’s time to raise the level to my personal next challenge: I’ve rm -rf’ed my Windows XP virtual machin...