Authenticated Remote Code Execution News Today

SEC Consult Vulnerability Lab Security Advisory < 20230918-0 >=======================================================================title: Authenticated Remote Code Execution andMissing Authenticationproduct: Atos Unify OpenScape Session Border ControllerAtos Unify OpenScape BranchAtos Unify OpenScape BCFvulnerable version: OpenScape SBC before V10 R3.3.0OpenScape Branch V10 before V10 R3.3.0OpenScape BCF V10 before V10 R10.10.0fixed version: OpenScape SBC V10 >=R3.3.0OpenScape Branch ...

# Exploit Title: POS Codekop v2.0 - Authenticated Remote Code Execution (RCE)# Date: 25-05-2023# Exploit Author: yuyudhn# Vendor Homepage: https://www.codekop.com/# Software Link: https://github.com/fauzan1892/pos-kasir-php# Version: 2.0# Tested on: Linux# CVE: CVE-2023-36348# Vulnerability description: The application does not sanitize the filenameparameter when sending data to /fungsi/edit/edit.php?gambar=user. Anattacker can exploit this issue by uploading a PHP file and