Cyber Labs - Blogs

ZeroPress - A WordPress Vulnerability Hunter

16 Sep 2016

Finding WordPress plugin vulnerabilities is like shooting fish in a barrel. Like taking candy from a baby. Like…...

Rocktastic: a word list on steroids

8 Sep 2016

Bigger isn’t always better, but sometimes it is. If you need a huge word list before you...

Introducing 'XSS Payloads' repository: Cross Site Scripting doesn't have...

2 Sep 2016

Sometimes, particularly when dealing with a system perimeter, there’s very little attack surface to deal with. You may find...

PoshC2 v1.0 released, a command and control framework

12 Jul 2016

PoshC2 is a proxy aware command and control framework written completely in PowerShell. It is designed to aid penetration...

QNAP Android: Don't Over Provide

7 Jun 2016

The QNAP Android applications Qnotes 1.1.8.0128 and Qget 2.0.1.1029 suffer from unintended data leakage. A malicious process can...

Escaping the Avast sandbox

19 Apr 2016

An Avast Sandbox escape, CVE-2016-4025, is possible due to a design flaw in the Avast DeepScreen feature. It is...

'Panda Security 2016 Home User' privilege escalation

5 Apr 2016

All Panda Security 2016 home user products for Windows are vulnerable to privilege escalation, CVE-2015-7378, which allows a...

CVE-2015-7596 through CVE-2015-7598 & CVE-2015-7961 through CVE-2015-7967: SafeNet Authentication...

31 Mar 2016

Several SafeNet Authentication Service Agents could allow a local attacker to obtain privilege escalation due to weak ACLs...

'QNAP Signage Station iArtist Lite' SYSTEM for everyone (Part...

4 Mar 2016

The QNAP iArtist Lite application is vulnerable to an uncontrolled search path element. This flaw can be leveraged by...

QNAP Signage Station: Publish and Be Damned (Part 2)

1 Mar 2016

Nettitude has discovered that the iArtist application is vulnerable to CWE-290 Authentication Bypass by Spoofing. This flaw can...

Filter by

ZeroPress - A WordPress Vulnerability Hunter

Rocktastic: a word list on steroids

Introducing 'XSS Payloads' repository: Cross Site Scripting doesn't have...

PoshC2 v1.0 released, a command and control framework

QNAP Android: Don't Over Provide

Escaping the Avast sandbox

'Panda Security 2016 Home User' privilege escalation

CVE-2015-7596 through CVE-2015-7598 & CVE-2015-7961 through CVE-2015-7967: SafeNet Authentication...

'QNAP Signage Station iArtist Lite' SYSTEM for everyone (Part...

QNAP Signage Station: Publish and Be Damned (Part 2)

Error

No results found