reddit 보안 봇

securityCTF,ReverseEngineering,netsec

[Theori @theori_io]

In a recent #APT simulation, #Theori uncovered 4 critical #RCE vulnerabilities in @cososys Endpoint Protector (EPP) that let us fully compromise the server & clients. Here’s a peek:

👾 CVE-2024–36072: Unauthenticated attackers can exploit a logging flaw to execute system commands with root privileges.

👾 CVE-2024–36073: With admin access, attackers can overwrite configurations and execute commands on client endpoints.

👾 CVE-2024–36074: Server access allows attackers to execute malicious files.

👾 CVE-2024–36075: Unauthenticated attackers can manipulate client configurations to potentially bypass security and achieve remote code execution.

Could your server be #hacked the same way? Find out through our blog post!
👉 https://t.co/PslFaFDbcF

[Theori @theori_io]

📑 실제 보안 컨설팅 중 발견한
원격 코드 실행(RCE) 0-Day 취약점 4건 공개!
🔗 https://t.co/fWuq3do8eR

Endpoint Protector(EPP) 솔루션 취약점의
발견 배경, 분석 과정, 이용 방법까지 확인해 보세요!

#티오리 #Theori #컨설팅 #RCE #취약점분석 #CoSoSys #사이버보안 #보안 #0Day #EPP #CVE

[reddit 보안 봇 @reddit_sec_bot]

https://t.co/9B2l5ywXBg

[reddit 보안 봇 @reddit_sec_bot]

[*]rebooting....

[reddit 보안 봇 @reddit_sec_bot]

Evading Microsoft's AutoRuns https://t.co/kwn3aYDDqG

[reddit 보안 봇 @reddit_sec_bot]

JOLTandBLEED Vulnerability CVSS 10.0 https://t.co/8c0IMuNazQ

[reddit 보안 봇 @reddit_sec_bot]

SQL Injection in bbPress https://t.co/dbYXwcVSp0

[reddit 보안 봇 @reddit_sec_bot]

using a custom libc https://t.co/HzfZNypP4B

[reddit 보안 봇 @reddit_sec_bot]

Staring into the Spotlight - An offensive tour of the OSX userland search system https://t.co/zmR4uZIr6A

[reddit 보안 봇 @reddit_sec_bot]

Github introduces automatic dependency security alerting https://t.co/QTqc10QlLs

[reddit 보안 봇 @reddit_sec_bot]

Remote Code Execution in Chrome OS ($100k Bounty) - Writeup https://t.co/kmEQUvm3aO

[reddit 보안 봇 @reddit_sec_bot]

SpookFlare: Stay In Shadows https://t.co/KJ6jnagMVx?

[reddit 보안 봇 @reddit_sec_bot]

CarolinaCon's CFP is now open! https://t.co/HJ7lgV6uJB

[reddit 보안 봇 @reddit_sec_bot]

Dangers of the Decompiler, A Sampling of Anti-Decompilation Techniques https://t.co/sGj1mlI3g4

[reddit 보안 봇 @reddit_sec_bot]

A fed only browser isolation platform (beta). https://t.co/2ssaMHgJll

[reddit 보안 봇 @reddit_sec_bot]

Bug bounty hunter walks away on 30k$ bounty from DJI (drone maker) https://t.co/zYiFFb5wcx

[reddit 보안 봇 @reddit_sec_bot]

Plus Accounts for Students! (ProtonMail) https://t.co/MGUocj4OQO

[reddit 보안 봇 @reddit_sec_bot]

Solving FlareOn 2017 - Challenge 3 with WinAppDbg (and three more hands-on WinAppDbg tutorials) https://t.co/MOeyaY3Vek

[reddit 보안 봇 @reddit_sec_bot]

Australian InfoSec Analysts Hit With Restraining Orders https://t.co/CGq2BowReW

[reddit 보안 봇 @reddit_sec_bot]

Parsing Untrusted File Formats Safely https://t.co/o8WUyQGzzu