TGViewer
Security Harvester Security Harvester @secharvester · 10.1K subscribers
Post #23562 166
Open Build Service, one year later: command execution through Mercurial argument injection
https://fenrisk.com/research/open-build-service-2/

@secharvester
Fenrisk Open Build Service, one year later: command execution through Mercurial argument injection In March 2025 we published an analysis of a remote code execution vulnerability in Open Build Service (OBS), tracked as CVE-2024-22033. A little over a year later we went back to the same attack surface and found a second, distinct flaw of the same family.…
Open in Telegram All posts from @secharvester
More from @secharvester
  1. Oct 5, 2026Looks like someone found a serious vulnerability in KVM https://cybernews.com/security/cri…
  2. Oct 5, 2026Wordpress libheif RCE https://fortbridge.co.uk/research/wordpress-libheif-rce/ @secharvest…
  3. Oct 5, 2026CPR data breach exposes personal details of 8.8 million people in Denmark https://cphpost.…
  4. Oct 5, 2026Python Shellcode-Anydesk-Apc-injection-Remote-IP-Address https://github.com/kaandemir993/P…
  5. Oct 5, 2026Free tools + labs for getting started with JWT pentesting https://youtu.be/ewJ4F3QKU3o?si=…
  6. Oct 5, 2026Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data https://ar…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →