misconfig

2 articles
sort: new top best
clear filter
0 5/10

A P1 RCE vulnerability discovered in a misconfigured Jenkins instance via Shodan reconnaissance, exploiting open user registration and exposed script console execution capabilities.

Shodan Jenkins sw33tLie
medium.com · devanshbatham/Awesome-Bugbounty-Writeups · 22 hours ago · details
0 5/10

ADCS ESC1 is a critical Active Directory Certificate Services misconfiguration where improperly configured certificate templates allow low-privileged users to request certificates on behalf of domain administrators, enabling full domain compromise through privilege escalation.

ADCS ESC1 Active Directory Certificate Services
cobalt.io · GhostShift · 1 day ago · details