Advisories archive

TL;DR Find out how we managed to inject an auth session into the device and through it gain a reverse
Vulnerable Key The following is the hardcoded key used by MyLittleAdmin, by inserting its values to ysoserial.exe it is possible
A vulnerability in ManageEngine OpManager allows a remote attacker to leak the API key of the product (administrative level API
Netsweeper provides real-time content monitoring and reporting for early intervention. One of our researchers had recently managed to perform remote
Vulnerability SummaryThe update functionality of the Cisco AnyConnect Secure Mobility Client for Windows is affected by a path traversal vulnerability
Vulnerability SummaryThe Ruckus IoT Suite is a collection of network hardware and software infrastructure used to enable multi-standard Internet of
Vulnerability SummaryThe Horde project comprises of several standalone applications and libraries. The Horde Groupware Webmail Edition suite bundles several of
Vulnerability SummaryIn FreeBSD there is a cryptographic device module called cryptodev which is accessible by any user on the system.
IntroductionNetwork-attached storage devices allow multiple users and heterogeneous client devices to retrieve data from centralized disk capacity. These NAS stations
IntroductionSince 2014, Intel is dominating the PC market as the leading graphics chip vendor worldwide with ~70% market share. With