ProjectDiscovery Stories

Atlassian Confluence - Remote Code Execution (CVE-2023-22527)

CVE-2023-22527 is a critical vulnerability within Atlassian's Confluence Server and Data Center. This vulnerability has the potential to permit unauthenticated attackers to inject OGNL expressions into the Confluence instance, thereby enabling the execution of arbitrary code and system commands. Technical Details Initial Analysis The CVE description provided by Atlassian made it clear that this vulnerability was automatically rendered unexploitable in version 8.5.4 due to certain incorpora

Vulnerability Research Nuclei & Templates

Community Spotlight: FailOpen

“I make all the mistakes, I might as well tell others before they make them. Fail is literally in my name.” -FailOpen If you’ve been on our Discord, you’ve probably seen FailOpen before. He is likely our most active user in Discord, can be seen in all of the channels, and almost always has an answer for any question. FailOpen is not only extremely present in Discord, he is also a valued contributor to our projects on GitHub. We were excited for the opportunity to chat with him just before our

Community & Open Source

Dashboard for Nuclei Results ProjectDiscovery Cloud Platform Integration

If you've been around our community for some time, you know that we've been hard at work getting ProjectDiscovery Cloud Platform ready for all of you. Our goal is to support community members using PD tools for everyone; from bug bounty hunting all the way through large enterprises who want to use cutting-edge tools to detect exploitable vulnerabilities in their external attack surface. While much of that work has been behind the scenes with design partners and others, we have released parts of

Nuclei & Templates

CrushFTP - CVE-2023-43177 Unauthenticated Remote Code Execution

CVE-2023-43177 is a critical vulnerability in CrushFTP. The vulnerability could potentially allow unauthenticated attackers with network access to the CrushFTP Instance to write files in the local file system and eventually in some versions could allow the executing of arbitrary system commands. Technical Details Based on the information shared in the original blog post at https://convergetp.com/2023/11/16/crushftp-zero-day-cve-2023-43177-discovered/, we embarked on an effort to gain a deeper

Vulnerability Research Nuclei & Templates

Nuclei Templates Monthly - November 2023 Edition

Summary of Releases v9.6.9 and v9.7.0 🎉 124 new Templates added 🚀 14 first-time contributions 🔥 31 new CVEs added Introduction This month, we've seen several high-profile CVEs impacting various technologies. Key among them is CVE-2023-46604, a significant vulnerability in Apache ActiveMQ, notable for its potential for remote code execution and widespread exploitation. CVE-2023-34039 in Aria Operations for Networks, an authentication bypass vulnerability, is another critical issue, charact

Nuclei & Templates

Community Spotlight: Geeknik

Welcome to our first community spotlight blog! We started the community spotlight recently for two major reasons: to recognize the work of some of our most active community members and to share that work with others. ProjectDiscovery is community driven, and all of our tools wouldn’t be possible without input from the community in the form of contributions, templates, and feedback. This month’s Community Spotlight is user Geeknik. You can find them on GitHub here. Geeknik has been participating

Community & Open Source

Bug Bounty Etiquette: Our Guide to Polite Hacking (Part Two)

This is the second part of our series on bug bounty etiquette. Part one looks at what you should be doing. Last month we talked about bug bounty etiquette and how to be a good bug bounty hunter; not in the sense of finding more bugs, but rather in how to be the kind of bug bounty hunter people want to work with. This time, we have some advice about what NOT to while bug bounty hunting. Let's get started. 1. Don’t go all out 2. Don’t ignore the rules 3. Don’t report unnecessary stuff 4. Do

Learning & Automation

GameOver(lay) - Local Privilege Escalation in Ubuntu Kernel

GameOver(lay) encompasses two significant vulnerabilities within the Ubuntu kernel, CVE-2023-2640, and CVE-2023-32629, each carrying a high-severity rating with CVSS scores of 7.8. These vulnerabilities pose a critical threat, potentially affecting around 40% of Ubuntu users. The vulnerability lies within the OverlayFS module of the Ubuntu kernel, enabling a local attacker to execute a privilege escalation attack, granting unauthorized elevated access to the system. Technical Details CVE-2023

Vulnerability Research Nuclei & Templates

Bug Bounty Etiquette: More than Ethical Hacking (part one)

This is part one of our two-part series on polite hacking, focusing on what to do. Part two talks about what not to do (link coming soon). This blog is not about techniques. It’s not about tools to use, how to find the vulnerability, or anything like that. There are plenty of those out there. It’s much more like an etiquette guide for Bug Bounty reporting, and how working within these social norms can lead to better outcomes for you in your career! Think of it like a cotillion class, or the fa

Learning & Automation

Atlassian Confluence Server (CVE-2023-22518) - Improper Authorization

CVE-2023-22518 is a critical vulnerability in Atlassian Confluence Data Center and Server. The vulnerability could potentially allow unauthenticated attackers with network access to the Confluence Instance to restore the database of the Confluence instance and eventually execute arbitrary system commands. Technical Details After performing a patch diff between the patched and unpatched versions, we identified the addition of two new annotations, namely, @WebSudoRequired and @SystemAdminOnly,

Vulnerability Research Nuclei & Templates

F5 BIG-IP Unauth RCE via AJP Smuggling (CVE-2023-46747) - Technical Analysis

Description: CVE-2023-46747 is a critical vulnerability in the F5 BIG-IP Configuration Utility identified as a request smuggling bug within the Apache JServ Protocol (AJP). The flaw could potentially allow unauthenticated attackers with network access to the BIG-IP system through the management port and/or self-IP addresses to execute arbitrary system commands. This vulnerability was discovered and reported by Thomas Hendrickson and Michael Weber of Praetorian Security. It has a CVSS score of 9

Vulnerability Research Nuclei & Templates

Nuclei Templates Monthly - Hacktober 2023 Edition

Summary of Releases v9.6.5, v9.6.6, v9.6.7 and v9.6.8 This month, we've released multiple versions of Nuclei Templates that bring numerous enhancements to Nuclei users. Here are some highlighted stats from the combined releases: 🎉 316 New Templates added 🚀 14 First-time contributions 🔥 158 New CVEs added Introduction Welcome to the October 2023 edition of Nuclei Templates Monthly Release. The cyber landscape continues to evolve with new, significant CVEs making waves in the community. T

Nuclei & Templates

ProjectDiscovery Stories

Atlassian Confluence - Remote Code Execution (CVE-2023-22527)

Community Spotlight: FailOpen

Dashboard for Nuclei Results ProjectDiscovery Cloud Platform Integration

CrushFTP - CVE-2023-43177 Unauthenticated Remote Code Execution

Nuclei Templates Monthly - November 2023 Edition

Community Spotlight: Geeknik

Bug Bounty Etiquette: Our Guide to Polite Hacking (Part Two)

GameOver(lay) - Local Privilege Escalation in Ubuntu Kernel

Bug Bounty Etiquette: More than Ethical Hacking (part one)

Atlassian Confluence Server (CVE-2023-22518) - Improper Authorization

F5 BIG-IP Unauth RCE via AJP Smuggling (CVE-2023-46747) - Technical Analysis

Nuclei Templates Monthly - Hacktober 2023 Edition

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company