My "Public Evernote"

This article describes exploitation of a 0day RCE in webapp iTop 2.4.0 . After getting a shell, I inserted credential sniffer, and next day ...

Hello everyone, Today I’d love to share an interesting XXE in a popular product of Code42.com company, which could give access to ba...