.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL
WatchTowr Labs detailed a .NET Framework flaw it calls SOAPwn, presented by researcher Piotr Bazydlo at Black Hat Europe in London, in which WSDL imports and HTTP client proxies can be manipulated to write arbitrary files and achieve remote code execution...