RCE Security

Julien Ahrens

Vulnerability Intel, ROP Gadget Hunter, Privacy Enthusiast, Full-time BugBounty hunter, @Hacker0x01 MVH, @SynackRedTeam member

Magix Bug Bounty: magix.com (RCE, SQLi) and xara.com (LFI, XSS)

2 minute read

The German Magix Software GmbH rewarded me with a Hall of Fame listing and a free Magix Music Maker 2014 Premium license for my reports of several serious se...

CVE-2014-2087: Free Download Manager CDownloads_Deleted:: UpdateDownload() Remote Code Execution

3 minute read

I’ve discovered another 0day Remote Code Execution flaw in a CNET.com Top10 software of its category, which has been downloaded more than 6 million times rig...

CVE-2014-2206: GetGo Download Manager HTTP Response Header Buffer Overflow Remote Code Execution

7 minute read

I’ve published another security advisory about a remote code execution vulnerability with a CVSS score of 10,0 today. Affected are all available versions of ...

VideoCharge Studio v2.12.3.685 GetHttpResponse() Remote Code Execution

19 minute read

I’m focusing on exploit development at the moment and it’s time to raise the level to my personal next challenge: I’ve rm -rf’ed my Windows XP virtual machin...

Mandriva, Netcup, Teamdrive and Wallstreet-Online Fix XSS Vulnerabilities

1 minute read

It’s 2014 and I have to tidy up my discovery archive a bit ;-) . Before joining the Internetwache.org project I have coordinated all found vulnerabilities by...