Kruxinator

[SEC Consult @sec_consult]

Local #PrivilegeEscalation in Quanos SCHEMA ST4.
Vulnerabilities in the update service allow low-privileged users to execute code or overwrite files.
➡️ On‑premise versions affected
➡️ Workaround available – disable update service
➡️ SaaS not affected
👉 https://t.co/LSK6tin7KS

[SEC Consult @sec_consult]

🚨 New advisory by @Kruxinator & Christian Hager: Local privilege escalation in @genetec 's #RabbitMQ deployment (#CVE-2026-25112)
Writable dir + missing binary + SeImpersonatePrivilege = SYSTEM via Rotten Potato 🥔
Patch available. Apply now!
🔗 https://t.co/B5vRETRqIq
#privesc

[Kruxinator @Kruxinator]

@SawyerMerritt https://t.co/T3MSYfKiGu

[packet storm @packet_storm]

Hands-Free Lockpicking: Critical Vulnerabilities in dormakaba's Physical Access Control System https://t.co/rkZdpFhy6l #news

[SEC Consult @sec_consult]

🚨 Critical vulns in dormakaba exos 9300! We’re sharing 20 CVEs in dormakaba’s physical access control system: doors can be opened without authentication with network access. Kudos to @dormakaba for excellent handling & patches.
👉 https://t.co/khdsG53EuN #ResponsibleDisclosure

[Kruxinator @Kruxinator]

@SawyerMerritt @anthslife Germany changed to HW4 in may 2024. I got a HW3 built in feb 2024.

[Kruxinator @Kruxinator]

@SawyerMerritt Wondering why I got an HW3 Model Y built in 2024.

[SEC Consult @sec_consult]

🚨 Security Advisory: Critical vulnerabilities found in @Rittal IoT Interface & CMC III Processing Unit. Predictable session IDs, improper firmware update process allows #RCE. Patch available! Full details: https://t.co/P96mLcvTgk #CyberSecurity #IoT #VulnerabilityAlert @Kr@Kruxinator

[Timo Lo(n)gin @timolongin]

The first version of an SMTP smuggling scanner is now available at https://t.co/t4Z8YeTR73.
More tools to come! Feedback is much appreciated!

[Timo Lo(n)gin @timolongin]

Just dropped a blog post about SMTP smuggling, a novel technique for e-mail spoofing!
https://t.co/cvm8MgxM04

[SEC Consult @sec_consult]

He did it again... @timolongin shows you how to poison the DNS name resolution of an entire country https://t.co/crApH7Mrgk #infosec #hackerlife

[Kruxinator @Kruxinator]

@ReneFreingruber Gz :)

[Timo Lo(n)gin @timolongin]

The DNS Analyzer extension is now officially available in the BApp Store!
For more info on finding DNS vulnerabilities in web applications via Burp Suite, check out:
https://t.co/NLWS9ml5Pj

[SkelSec @SkelSec]

msldap got a public update v0.4.7(pip+github)
Added retrieval of gmsa user passwords and security descriptors
Did some fixes and other features I forgot about since the last release

Thx for @porchetta_ind supporters!
https://t.co/7vU54aO98P

[Stefan Viehböck @sviehb]

Electronic price tags can be manipulated to display arbitrary values. My team's research at #hardwear_io
Slides: https://t.co/VukPBHi0yL

[Charlie Clark @exploitph]

Been working on some new features for PowerView, it's still a work in progress but just pushed a few, cert auth for LDAPS and StartTLS for Get-DomainObject, Get-DomainUser, Get-DomainComputer and Set-DomainObject 1/2

https://t.co/H9rrPiTZeD

[SEC Consult @sec_consult]

And another one: Stacking of critical vulnerabilities allows unauthenticated attackers to hijack video streams in Poly's Eagle Eye Director II https://t.co/snDkxUbx4t Patch immediately! @PolyCompany #hybridworking #homeoffice #infosec @Kruxinator

[SEC Consult @sec_consult]

Multiple #PolyStudio devices are prone to an authenticated OS Command Injection vulnerability ⚠️​https://t.co/id6r5SCnYq 🛡️The commands are executed with root privileges.

@PolyCompany #hybridworking #homeoffice @kruxinator

[SEC Consult @sec_consult]

A Different Approach to Printer Pentesting https://t.co/jbnhkVmX7J Learn how to escape the sandbox #konica #pentesting #infosec

[Jorge Orchilles @jorgeorchilles]

Saving you 10 mins of googling. An .scr is just an .exe renamed:
copy C:\Windows\system32\calc.exe Desktop\calc.scr

rundll32.exe desk.cpl,InstallScreenSaver Desktop\calc.scr