Advisories archive

SSD Advisory – Adobe Acrobat Reader DC Use After Free
Vulnerability SummaryA use-after-free vulnerability exists in Adobe Acrobat Reader DC, which allows attackers execute arbitrary code with the privileges of
SSD Advisory – GetSimple CMS Unauthenticated Remote Code Execution
Vulnerabilities SummaryThe following advisory describes a vulnerability in GetSimple CMS which allows unauthenticated attackers to perform Remote Code Execution.CVECVE-2019-11231CreditAn independent
SSD Advisory – Vesta CP Remote Command Execution To Privilege Escalation
Vulnerabilities SummaryThe following advisory describes a vulnerability in Vesta control panel (VestaCP), an open source hosting control panel, which can
SSD Advisory – iOS powerd Uninitialized Mach Message Reply to Sandbox Escape and Privilege Escalation
(This advisory follows up on a vulnerability provided in Hack2Win Extreme competition, that won the iOS Privilege Escalation category in
SSD Advisory – Synology PhotoStation Unauthenticated SQL Injection and Arbitrary File Injection to RCE
Vulnerabilities SummaryThe following advisory describes two vulnerabilities found in Synology PhotoStation, an unauthenticated SQL injection combined with an authenticated arbitrary
SSD Advisory – VxWorks RPC Buffer Overflow
Vulnerability SummaryThe following advisory describes a vulnerability found in the Remote Procedure Call (RPC) component of the VxWorks real-time Opearting
SSD Advisory – Horde Groupware Webmail Authenticated Arbitrary File Injection to RCE
Vulnerabilities SummaryThe following advisory discusses an arbitrary file injection vulnerability that leads to remote code execution in Horde Groupware Webmail.
SquirrelMail – Incoming e-Mails Stored XSS
AbstractSquirrelMail allows to display HTML messages provided that non-safe fragments are redacted. An input sanitization vulnerability that can be exploited
SSD Advisory – MDaemon Mail Server Multiple XSS Vulnerabilities
Vulnerabilities SummaryThe following advisory describes two XSS vulnerabilities found in MDaemon Mail Server which lets attackers send emails with malicious
SSD Advisory – Linux BlueZ Information Leak and Heap Overflow
(This advisory follows up on a presentation provided during our offensive security event in 2018 in Hong Kong - come