Blog
WhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive
I discovered an unauthenticated path traversal against the latest version of progress whatsup gold and turned it into a pre-auth RCE, following is how I did it, this is the story of CVE-2024-4885
WhatsUp Gold Pre-Auth RCE WriteDataFile Primitive
Using a path traversal vulnerability to achieve remote code execution, this is the story of CVE-2024-4883 a pre-auth RCE against progress whatsup gold
WhatsUp Gold SetAdminPassword Privilege Escalation
Lets analyze a privilege escalation which I found targeting progress whatsup gold, this is the story of CVE-2024-5009
There are no Secrets || Exploiting Veeam CVE-2024-29855
CVE-2024-29855
Bypassing Veeam Authentication CVE-2024-29849
CVE-2024-29849
VMWare Aria Operations for Networks Static SSH key RCE
CVE-2023-34039
Pre-authenticated RCE in VMware vRealize Network Insight
CVE-2023-20887
Pre-authenticated Remote Code Execution in VMWare NSX Manager
CVE-2021-39144, CVE-2022-31678
Veeam Unauthenticated Remote Code Execution
CVE-2022-26503,CVE-2022-26504,CVE-2022-26500,CVE-2022-26501