GoIP-1 GSM gateway contains vulnerabilities that allow hackers to send SMS messages and make calls for free

Explore this post and more from the netsec community

In this article we discuss the security of client-side session storages and analyze a vulnerable implementation in the IT monitoring solution Zabbix.

Explore our CyberArk open-source tools, Kubesploit and KubiScan, that will help Kubernetes users maximize their security.

Are you aware of the risks lurking in your default Jenkins configuration?

Examples with how to not use secrets. Contribute to commjoen/wrongsecrets development by creating an account on GitHub.

This disclosure is of the Extensis Portfolio software which was deployed publicly on the internet with default administrative credentials found by White Oak Sec

This post describes a vulnerability found and exploited in October 2021 by Alex Plaskett, Cedric Halbronn, and Aaron Adams working at the Exploit Development Group (EDG) of NCC Group. We successful…

In January 20, 2022 Amazon AWS has introduced a new threat detection in GuardDuty to block credential exfiltrations. Can be bypassed?

If  you want to run code to provide observability, security or network functionality, running it in the kernel of your operating system gives you a lot of power because that kernel can see and control everything on the system. That’s powerful, but potentially…

Create, distribute, host, and monetize your podcast, 100% free.

As the noscript states, the latest release of Certipy contains many new features, techniques and improvements. This blog post dives into the…

rconn is a multiplatform program for creating generic reverse connections. Lets you consume services that are behind firewall or NAT without opening ports or port-forwarding. - GitHub - jafarlihi/r...

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability…

Warning to the reader
This is my first time doing kernel exploit development - so the following probably contains some errors which I apologise in advance for.

A command-line tool to quickly analyze all IPs in a file and see which ones have open ports/ vulnerabilities. Can also be fed data from stdin to be...

Contribute to halencarjunior/plsc4n development by creating an account on GitHub.

CVE-2021-28500 Talkative Marmot For those of you who that don’t want to read the whole back story and just want to see what CVE-2021-28500 (#TalkativeMarmot) is, you can review Arista’s full detailed security advisory here.
Essentially, this is an authentication…