stuxxn

[stuxxn @stuxxn]

Wie kann ich euch sicher die Details ueber die gefundene Schwachstelle zukommen lassen ?

[stuxxn @stuxxn]

@drivelock_de Hallo, ich wuerde gerne eine kritische Schwachstelle in eurem DriveLock Client melden. Da ihr keine `.well-known/security.txt` habt, habe ich am 13. Sep eine E-Mail an `[email protected]` geschickt.

[stuxxn @stuxxn]

Da ich keine Antwort bekommen haben, habe ich eine Anfrage an `[email protected]` geschickt. Leider hier das gleiche - Keine Antwort. Dann habe ich heute ueber das Formular auf eurer Seite eine Anfrage gestellt und wieder nichts.

[SEC Consult @sec_consult]

List of critical vulnerabilities in #ilias #elearning platform keeps growing https://t.co/srLg8KXwrj Patch now! #opensource is only a good choice if it is up-to-date. #xss #RCE #fileupload @ILIASeLearning

[stuxxn @stuxxn]

Multiple vulnerabilities in ILIAS eLearning platform

Found some vulnerabilities in #ILIAS

* Unauthenticated access to local files via path traversal - CVE-2023-31467
* Auth Bypass - CVE-2023-32779
* Authenticated RCE - CVE-2023-32778

Details for 1/2: https://t.co/4r618eEH0F

[SEC Consult DACH @sec_consultDACH]

Ungebetene Gäste: Benutzer mit wenigen Rechten in @OpenText ™ CMS können Dateien auf dem Server löschen, beliebigen OScript-Code ausführen und sich selbst zum Admin befördern https://t.co/UbH2eEWE7t über @stuxxn #cms #infosec #ITsicherheit #webentwicklung

[SEC Consult @sec_consult]

Another vulnerability discovered in Opentext CMS: the Java Frontend is making it even easier for unauthenticated hackers to take over your webserver https://t.co/URtmLcqCjf via @stuxxn #cms #infosec #cybersecurity #hacking

[SEC Consult @sec_consult]

Goodbye hard work, hello admin access: Vulnerabilities in @Opentext CMS make it easy to execute code and take over your webserver https://t.co/mGJMSWKmff via @stuxxn #cms #infosec #cybersecurity #hacking

[SEC Consult @sec_consult]

Guest users from hell: Low-privileged attackers can delete files on the server, execute arbitrary OScript code and escalate privileges to admin in @OpenText ™ CMS https://t.co/msceZs5YqO via @stuxxn #cms #infosec #cybersecurity #hacking

[SEC Consult @sec_consult]

Remote code execution bypass (CVE-2021-34427) in Eclipse Business Intelligence Reporting Tool https://t.co/gFQolDak5N #businessintelligence #infosec #BiRT #opensource The previous fix for this vulnerability can be bypassed @EclipseFdn

[stuxxn @stuxxn]

@evandrix oh and there is even a real coin:
https://t.co/avwGFxGmb4

[stuxxn @stuxxn]

#flareon8 Second time in a row :-). Give me the shiny coin...

[stuxxn @stuxxn]

@evandrix I'm talking about this one: https://t.co/nSF0cgdXLw
https://t.co/rtS9Ao4Ojr

[stuxxn @stuxxn]

@pawel_lukasik sure. Send me DM

[stuxxn @stuxxn]

@tcode2k16 @FireEye Good job !

[stuxxn @stuxxn]

@pewterbrass @ZetaTwo @nickharbour @mikesiko Could you send me a DM with the shortcut solution ? I reimplemented the VM and I'm curious what I didnt see

[Markus Dauberschmidt @daubsi]

It would be so cool to get some challenges in source code form from the authors once #flareon8 ends so we can see what we actually reversed and how this was done (ch 7,9,10,..) to learn even more from it. Could you please consider to make this happen FLARE Team? ❤️

[stuxxn @stuxxn]

Just finished #flareon8 challenge 8 BeeLogin. I think its way it easy for a level 8 challenge. But still fun. Feel free to send a DM if are stuck.

[stuxxn @stuxxn]

#flareon7 Hello shiny coin. I tried it for the last 4 years to solve every challenge and get this coin. Now finally I made it.

[stuxxn @stuxxn]

#flareon7 challenge 10 break. Is anyone there how could give me a hint for part 3 ? Im really frustrated and have no clue whats going on there :-(