https://serdire.github.io/YASH MAHESHWARIDon't Stock, I'll Investigate 2026-09-28T06:08:22+08:00 YASH MAHESHWARI https://serdire.github.io/ Jekyll © 2026 YASH MAHESHWARI /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Dependency Confusion Attack: A Route to RCE2025-05-12T13:00:00+08:00 2026-09-28T02:56:31+08:00 https://serdire.github.io/posts/dependency/ YASH MAHESHWARI Hello, amazing hackers! Today, I’m explaining one of my recent findings: the dependency confusion attack and how it can lead to remote code execution. This vulnerability was discovered during a private pen-test engagement. What is Dependency Confusion? A Dependency Confusion attack or supply chain substitution attack occurs when a software installer script is tricked into pulling a ... Dependency Confusion Attack: A Route to RCE2025-05-12T13:00:00+08:00 2026-09-28T02:56:31+08:00 https://serdire.github.io/posts/dependency/ YASH MAHESHWARI Hello, amazing hackers! Today, I’m explaining one of my recent findings: the dependency confusion attack and how it can lead to remote code execution. This vulnerability was discovered during a private pen-test engagement. What is Dependency Confusion? A Dependency Confusion attack or supply chain substitution attack occurs when a software installer script is tricked into pulling a ... Dependency Confusion Attack: A Route to RCE2025-05-12T13:00:00+08:00 2026-09-28T02:56:31+08:00 https://serdire.github.io/posts/dependency/ YASH MAHESHWARI Hello, amazing hackers! Today, I’m explaining one of my recent findings: the dependency confusion attack and how it can lead to remote code execution. This vulnerability was discovered during a private pen-test engagement. What is Dependency Confusion? A Dependency Confusion attack or supply chain substitution attack occurs when a software installer script is tricked into pulling a ... XPATH Injection - Exploiting Error-based SQL Injection2025-03-16T21:00:00+08:00 2026-09-28T02:56:31+08:00 https://serdire.github.io/posts/XPATH-Injection/ YASH MAHESHWARI Hey hackers!! Today, I’m explaining the exploitation of the error-based SQL injection via XPATH injection. This vulnerability was discovered during a private pen-test engagement. Understanding the UPDATEXML and EXTRACTVALUE Functions Let’s first understand the UPDATEXML and EXTRACTVALUE XML functions, as they are helpful for exploiting the error-based SQL injection. Here, we are tak... XPATH Injection - Exploiting Error-based SQL Injection2025-03-16T21:00:00+08:00 2026-09-28T02:56:31+08:00 https://serdire.github.io/posts/XPATH-Injection/ YASH MAHESHWARI Hey hackers!! Today, I’m explaining the exploitation of the error-based SQL injection via XPATH injection. This vulnerability was discovered during a private pen-test engagement. Understanding the UPDATEXML and EXTRACTVALUE Functions Let’s first understand the UPDATEXML and EXTRACTVALUE XML functions, as they are helpful for exploiting the error-based SQL injection. Here, we are tak...