Personal cybersecurity blog: vulnerability research, CVE analysis, writeups and technical notes.https://www.brigante.info/enhttps://www.brigante.info/en/posts/cve-2023-32268-microfocus-filr/https://www.brigante.info/en/posts/cve-2023-32268-microfocus-filr/A Filr administrator can retrieve, in cleartext, the LDAP service password used to synchronise Active Directory, opening a path to full domain controller compromise.Wed, 28 Jun 2023 00:00:00 GMTcveinformation-disclosureldapactive-directorypenetration-testhttps://www.brigante.info/en/posts/cve-2022-39983-instant-developer-rd3/https://www.brigante.info/en/posts/cve-2022-39983-instant-developer-rd3/A library in Instant Developer's RD3 framework allows arbitrary file upload and remote code execution on every web app built with versions prior to 22.5 r23.Mon, 20 Feb 2023 00:00:00 GMTcvefile-uploadrcedotnetwebhttps://www.brigante.info/en/posts/cve-2022-30422-planet-time-enterprise/https://www.brigante.info/en/posts/cve-2022-30422-planet-time-enterprise/A default validationKey in Planet Time Enterprise's web.config lets an unauthenticated attacker forge a malicious ViewState and execute commands remotely on the server.Thu, 16 Jun 2022 00:00:00 GMTcvedeserializationviewstatedotnetrce