CVE-2023-42793 allow an unauthenticated malicious actor to execute arbitrary code on the TeamCity server prior to 2023.05.4. The exploitation of this CVE resulted in code execution with elevated privileges.
Assembly language is a low-level language that can write instruction the processors can understand. By using Assembly, developers can write human-readable machine instruction, which are then assembled into machine code, so that the processor can directly run them.
SQL injection (SQLi) refers to an injection attack wherein an attacker can execute malicious SQL statements that control a web application's database server.This allows an attacker to interfere with the queries that an application makes to its database. This can allow an attacker to view data that they are not normally able to retrieve.
Pengalaman pertama saya di dunia CyberSecurity dimulai ketika saya mulai mengikuti perlombaan Capture The Flag (CTF) yang diadakan oleh provinsi saya, Lomba ini bernama Lomba Kompetisi Siswa cabang keamanan Siber Tingkat Provinsi.