Skip to content

DEV Community

CVE Walkthroughs Series' Articles

Back to Santosh Kumar Puppala's Series

Santosh Kumar Puppala

Sep 2

A SQL escape is not a shell escape: OS command injection in GOautodial goAPIv2

#security #cve #php #appsec

5 min read

Santosh Kumar Puppala

Sep 2

The TODO shipped to npm: an unauthenticated route that could stop any city's AI workflow (Your Priorities, @yrpri/api < 9.0.244)

#security #node #typescript #appsec

7 min read

Cover image for Uppercase the path, skip the auth gate: an unauthenticated nginx bypass in CISA's Malcolm (GHSA-7j32-cf27-cp6h)

Santosh Kumar Puppala

Oct 26

Uppercase the path, skip the auth gate: an unauthenticated nginx bypass in CISA's Malcolm (GHSA-7j32-cf27-cp6h)

#security #cve #nginx #appsec

6 min read