... Loading ...

SSD Secure Disclosure

Disclosing vulnerabilities responsibly since 2007

Scope

Targets of interest:


  • Operating systems: Windows / Linux (RCE and PE)
  • Mobile: iOS (PE from within the Sandbox) / Android
  • Web Browsers: Chrome (RCE or SBX) / Safari / FireFox (RCE)

  • Readers: Microsoft Office
  • Web Hosting Control Panel: cPanel / Plesk / DirectAdmin / Webmin / VestaCP / Aegir / CentOS Web Panel
  • Mailserver: Exchange Server / Dovecot / Zimbra / Roundcube / MDaemon / Horde / Exim / Postfix / IceWarp
  • CMS: WordPress / Joomla / Drupal
  • Embedded: Mobile Baseband / NAS / Routers / DVR / IoT
  • Network Management Systems: Zabbix / Nagios / PRTG / Cacti
  • Mobile Applications: Facebook / Whatsapp / Facebook Messenger / iMessage / FaceTime / Instagram / Youtube / GoogleMaps / Truecaller / Skype / Telegram
  • Git server: GitHub / GitLab enterprise / Bitbucket
  • Others: Atlassian JIRA / PHP / .NET / Firewalls / Protocols / Apache / Engine X / IIS / ManageEngine OpManager

Got a vulnerability out of this scope? Send us an email, we can still help: contact@ssd-disclosure.com

Print Friendly, PDF & Email