PAYATU

Manmeet

Ex-Bandit
Former Senior Security Consultant at Payatu, working on web and application security and exploit development and security research. Has authored 6 blogs, 1 published CVE for Payatu.
PAYATU

Manmeet

Ex-Bandit
Former Senior Security Consultant at Payatu, working on web and application security and exploit development and security research. Has authored 6 blogs, 1 published CVE for Payatu.
Former Senior Security Consultant at Payatu, working on web and application security and exploit development and security research. Has authored 6 blogs, 1 published CVE for Payatu.
PAYATU

Manmeet

Ex-Bandit

CVEs published

Vulnerabilities discovered and responsibly disclosed. Each links to the Payatu advisory.

Remote Code Execution In JsonPickle Python Module

Remote Code Execution in jsonPickle python module jsonpickle <= 1.4.2 versions allows remote code execution during deserialization of a malicious payload through the decode() function.
Developer Tools & Libraries
Remote Code Execution
Critical
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Talks & appearances

Conferences, podcasts and workshops.
No items found.

Articles by  

Manmeet

Cloud & AppSec Engineering
Graphql Exploitation(Part 4)- Resource Exhaustion (DOS)
March 31, 2022
8 min
Cloud & AppSec Engineering
Engineers
Researchers
Guides & tutorials
Red Team & infrastructure
AD Enumeration Without External Scripts
February 9, 2022
6 min
Red Team & infrastructure
Researchers
Engineers
Guides & tutorials
Web & API
Graphql Exploitation – Part 3- Injection attacks and XSS attacks
June 25, 2021
8 min
Web & API
Researchers
Engineers
Guides & tutorials
Web & API
Cloud & AppSec Engineering
Graphql Exploitation – Part 2- Unauthorized Execution of Queries
April 28, 2021
4 mins
Web & API
Cloud & AppSec Engineering
Engineers
Researchers
Guides & tutorials
Web & API
CTF & Learning
Cloud & AppSec Engineering
Graphql Exploitation – Part 1- Understanding Graphql & Enumeration of Graphql Schema
March 1, 2021
10 mins
Web & API
CTF & Learning
Cloud & AppSec Engineering
Engineers
Researchers
Guides & tutorials
Cloud & AppSec Engineering
Log4j Vulnerability-An overview to the un-noticed open window in your application.
6 min
Cloud & AppSec Engineering
Researchers
Engineers
Guides & tutorials

The Bandits

Conferences, podcasts and workshops.
Bandits
All

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.