out-of-band

1 article
sort: new top best
clear filter
0 6/10

A bug bounty writeup describing how LaTeX injection in a journal CMS's PDF conversion feature can be exploited to read arbitrary files and achieve remote command execution via crafted LaTeX payloads, escalated to database/Elasticsearch access through SSRF.

Yasho InfoSec Write-ups
medium.com · devanshbatham/Awesome-Bugbounty-Writeups · 6 hours ago · details