Stack Overflow
Stack Overflow

Questions tagged [rce]

Abbreviation for Remote Code Execution

7 questions
3
votes
1 answer

How to fix the security vulnerability in system.drawing.common 4.7.0 package refered by Microsoft.EntityFrameworkCore.SqlServer(6.0.3)?

In Visual Studio 2022, API project created using .NET Core 6.0.6 runtime, we are using Microsoft.EntityFrameworkCore.SqlServer 6.0.3 nuget package. But recently found that there is a security vulnerability in the System.Drawing.Common 4.7.0…
RAMA KRISHNA
  • 31
  • 2
1
vote
1 answer

Webshell upload in django webapp

What file can be uploaded on a webapp built on django framework if it's allowing unrestricted file upload? When I uploaded a shell.py it simply rendered as text in the browser but html and javascript are executing fine.
Subo
  • 29
  • 3
0
votes
0 answers

How to fix the High Risk Remote Code Execution (RCE) vulnerability in System.Data.Common 4.3.0 package referenced by Telerik.UI.for.Blazor

In Visual Studio 2022, I created a library project using .NET Core 6.0 runtime, I am using Telerik.UI.for.Blazor 3.7.0 nuget package. After recent vera code scan I found that there is a security vulnerability in the System.Data.Common 4.3.0 package…
Nabaraj Ghimire
  • 1
  • 1
0
votes
1 answer

RCE on a Cloud Function in GCP

Can we talk about remote code execution in a serverless? Let's say I have a Cloud Function in GCP that's vulnerable to RCE. If an attacker uses the right payload, will he be able to execute commands on the container of the Cloud Function ? Thank you…
Foued
  • 1
0
votes
0 answers

How does Spring prevents request body deserialization attacks?

I have read about deserialization attacks recently and I wonder how does Spring prevent JSON injections. For example let’s consider a request body of a post request, we can instantiate an arbitrary malicious class and execute commands on the server.…
Hüseyin Aydın
  • 486
  • 5
  • 9
0
votes
0 answers

KQl to extract RCE attempts

I am trying to query For Remote Code Execution Attempt alerts, Does anyone have an idea how to go about this. SecurityAlert | where TimeGenerated >= ago(20d) | where AlertName contains "Remote code execution attempt" | extend Entities =…
Tony Ben
  • 3
  • 1
  • 2
0
votes
2 answers

MediaWiki treats CLTF text as RCE

Help. I have a weird problem on a MediaWiki 1.37.2 install. We (me & the musician) are trying to get a wiki going for Clan Lord Tune Format music (like midi but with a–g, "." for flat, "[…]" for chords so "[DFA.]" is a possible chord). However, when…
M Noivad
  • 96
  • 7