Skip to content

Instantly share code, notes, and snippets.

View SaleSlave's full-sized avatar

SaleSlave SaleSlave

View GitHub Profile
@SaleSlave
SaleSlave / RCE
Last active September 25, 2026 12:11
RCE via importFile
Auth RCE (Remote Code Execution) via arbitrary file upload.
Product
https://github.com/hashtopolis/server
Affected versions
0.14.8
Patched versions
1.0.0
CVE-2024-35627 Cross Site Scripting (XSS)
Product
https://github.com/maptiler/tileserver-gl
Affected versions
<= 4.4.10
Patched versions
4.5.0