DEV Community

#rce

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
After Plex2Shell: A Detection and Recovery Checklist for Media Servers You Cannot Rebuild Blindly

After Plex2Shell: A Detection and Recovery Checklist for Media Servers You Cannot Rebuild Blindly

Comments
4 min read
The Payoff Behind Plex2Shell: Why Home Media Servers Become Proxy and Mining Nodes

The Payoff Behind Plex2Shell: Why Home Media Servers Become Proxy and Mining Nodes

Comments
4 min read
Plex2Shell: Anatomy of a Four-Stage Chain From Open Port to Root-Level Code Execution

Plex2Shell: Anatomy of a Four-Stage Chain From Open Port to Root-Level Code Execution

Comments
4 min read
Why Internet-Facing Media Servers Stay Vulnerable: Plex Exposure in Numbers and Practice

Why Internet-Facing Media Servers Stay Vulnerable: Plex Exposure in Numbers and Practice

Comments
4 min read
CWE-73 in Practice: How Controlled File Paths Become Code Execution in Plex

CWE-73 in Practice: How Controlled File Paths Become Code Execution in Plex

Comments
4 min read
Four Moderate Flaws, One Critical Chain: What the Plex2Shell Disclosure Teaches Vulnerability Research

Four Moderate Flaws, One Critical Chain: What the Plex2Shell Disclosure Teaches Vulnerability Research

Comments
4 min read
Shadow Media Servers: When a Plex Box on the Corporate LAN Becomes an Incident

Shadow Media Servers: When a Plex Box on the Corporate LAN Becomes an Incident

Comments
4 min read
Remote Access by Default: Auditing the Plex Port Forwards That Made Plex2Shell Exploitable

Remote Access by Default: Auditing the Plex Port Forwards That Made Plex2Shell Exploitable

Comments
4 min read
Two core RCEs in one week, neither needs a sleepless night

Two core RCEs in one week, neither needs a sleepless night

1
Comments 1
3 min read
Bedrock Structured Outputs, a Real Supply Chain Compromise, and Six More Things Demanding Your Attention

Bedrock Structured Outputs, a Real Supply Chain Compromise, and Six More Things Demanding Your Attention

Comments
5 min read
PHP Servers Still Vulnerable to RCE Despite Patches; Restart Web Services to Fix

PHP Servers Still Vulnerable to RCE Despite Patches; Restart Web Services to Fix

1
Comments
9 min read
HTTP2Shell Vulnerability in Python Servers Using Brotli Compression: Remote Code Execution Risk and Mitigation

HTTP2Shell Vulnerability in Python Servers Using Brotli Compression: Remote Code Execution Risk and Mitigation

Comments
13 min read
Mage-OS and BlockStrap: the same framework, a different release train

Mage-OS and BlockStrap: the same framework, a different release train

Comments
3 min read
Detecting and responding to BlockStrap exploitation on a Magento store

Detecting and responding to BlockStrap exploitation on a Magento store

Comments
4 min read
Why the BlockStrap attack path runs through checkout and a failed payment email

Why the BlockStrap attack path runs through checkout and a failed payment email

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.