SSD Advisory – macOS Finder RCE

Find out how a vulnerability in macOS Finder system allows remote attackers to trick users into running arbitrary commands.

September 21, 2021 Uncategorized 32 comments

SSD Advisory – NETGEAR D7000 Authentication Bypass

Find out how a vulnerability in NETGEAR D7000 device allows remote unauthenticated users to reveal the ‘admin’ password used to login to the admin web interface of the product. NOTE: The vendor states that multiple other devices are also vulnerable.

September 6, 2021 Uncategorized Comments Off on SSD Advisory – NETGEAR D7000 Authentication Bypass

SSD Advisory – Samsung S10+/S9 kernel 4.14 (Android 10) Kernel Function Address (.text) and Heap Address Information Leak

Find out how a vulnerability discovered in Samsung S10+/S9 kernel allows leaking of sensitive function address information.

August 24, 2021 Uncategorized 4 comments

SSD Advisory – IP-Board Stored XSS to RCE Chain

Find out how an XSS in IP-Board can be leveraged into an remote code execution.

August 17, 2021 Uncategorized 3 comments

SSD Advisory – aaPanel CSWH to RCE

Find out how a CSWH hijacking vulnerability in aaPanel allows remote attackers to cause an authenticated user to execute arbitrary commands inside aaPanel’s managed servers.

August 2, 2021 Uncategorized Comments Off on SSD Advisory – aaPanel CSWH to RCE