How we exploited a remote code execution vulnerability in math.js

capacitorset.github.iosite

from

Web Security

added

2026-10-10

likes

0

similar

1. ▲
   Exploiting Node.js deserialization bug for Remote Code Execution opsecx.com

   site category #web-security link ↗
   
2. ▲
   How We Hacked a Software Supply Chain for $50K landh.tech

   site category #cicd-attacks link ↗

   Scraped JavaScript front-end files of the target and used ASTs to identify import/require statements which lead to discovering a public container with NPM credentials.

   
3. ▲
   How a Single Vulnerability Can Bring Down the JavaScript Ecosystem landh.tech

   site category #cicd-attacks link ↗

   Cache poisoning attack on the NPM registry rendering packages unavailable.

   
4. ▲
   Metasploit JavaScript Obfuscator github.com

   site category #ctf link ↗
5. ▲
   GitHub Enterprise Remote Code Execution bounty.github.com

   site category #web-security link ↗
6. ▲
   Remote Code Execution on a Facebook server blog.scrt.ch

   site category #web-security link ↗

Web Security › Tricks > Remote Code Execution: “Written by @capacitorset.”