[ByteForge]

https://upload.wikimedia.org/wikipedia/c..._logo.webp

Hi, I currently have a Unauthentificated Remote Code Execution (RCE) vulnerability, it's a zero day and is present on more than 2000 servers referenced by shodan.io

The problem is the command execution is executed from the user www-data, despite a long period of investigation I have not found any way to privesc.

What do you think I should do with the vulnerability ?

[Circle]

share and we could maybe advice you how to privesc

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Death threats to staff | "i swear if i see you in prison i'll send someone to slit your throat"

[ByteForge]

share and we could maybe advice you how to privesc

I'll really share it if I don't find anything fun to do

[PlayBoy]

you can try to sell the vulnerability

[the_one_who_phishes]

find a vuln binary, put it there and exploit it
whiteheads are calling this byovd
but it is just putting a vulnerable thing inside the machine and using it