Hey PHP, those variables look like garbage don’t you agree? No? Well look again… tl;dr: We have found two use-after-free vulnerabilities in...
Tag - use-after-free
It all started by auditing Pornhub, then PHP and ended in breaking both… tl;dr: We have gained remote code execution on pornhub.com and have earned a...
While auditing Pornhub we have stumbled across several pages where user input was evaluated by unserialize and the result was reflected back to the page. After...