PAYATU

Farid

Ex-Bandit
Former Co-Lead - Security Consultant at Payatu, working on web and application security and exploit development and security research. Has authored 1 blog, 2 published CVEs for Payatu.
PAYATU

Farid

Ex-Bandit
Former Co-Lead - Security Consultant at Payatu, working on web and application security and exploit development and security research. Has authored 1 blog, 2 published CVEs for Payatu.
Former Co-Lead - Security Consultant at Payatu, working on web and application security and exploit development and security research. Has authored 1 blog, 2 published CVEs for Payatu.
PAYATU

Farid

Ex-Bandit

CVEs published

Vulnerabilities discovered and responsibly disclosed. Each links to the Payatu advisory.

CSRF leads to pages deletion (CVE-2020-25263)

PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted.
Web / CMS
Authentication & Access Bypass
High
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

CSRF leads to pages deletion (CVE-2020-25262)

PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.
Web / CMS
Authentication & Access Bypass
Medium
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Talks & appearances

Conferences, podcasts and workshops.
No items found.

Articles by  

Farid

Web & API
Thick Client Pentesting: Architecture, Tools and Testing Approaches
June 2, 2021
8 min
Web & API
Researchers
Engineers
Guides & tutorials

The Bandits

Conferences, podcasts and workshops.
Bandits
All

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.