$#insecure-deserialization

Hacker Holidays — Day 5: Beach Bar

Demo creds in an HTML comment lead to an unsafe YAML deserialization RCE in a playlist importer, then a root password exposed in plain process arguments gets reused directly for su root.

• #hacker-holidays
• #insecure-deserialization
• #privesc
• #credential-access