Pentesting the ELK Stack With this blog post, I will provide information on how to proceed when testing ELK... 2021-01-13 20:45:03 | 阅读: 262 | 收藏 | insinuator.net logstash kibana security

ERNW White Paper 70 – HL7 FHIR: Preserving Distributed Resource Integrity With this blog post I am pleased to announce the publication of a new ERNW White... 2020-12-18 22:22:40 | 阅读: 240 | 收藏 | insinuator.net fhir security hl7 ernw repudiation

Root Cause Analysis of a Heap-Based Buffer Overflow in GNU Readline In the last blog post, we discussed how fuzzers determine the uniqueness of a cras... 2020-12-17 16:44:16 | 阅读: 906 | 收藏 | insinuator.net rl readline 510271 gef reverse

Security Advisories for SolarWinds N-Central 12.3.0.670 to the vendor.The following CVE IDs were assigned to the issues :CVE... 2020-12-10 19:27:24 | 阅读: 279 | 收藏 | insinuator.net nac database 25617 attacker

How Fuzzers Decide if a Crash is Unique This blogpost sheds some light on how fuzzers handle crash deduplication and what... 2020-12-03 17:00:14 | 阅读: 279 | 收藏 | insinuator.net test2 havoc 64286 000000 test1

VMware NSX-T MITM Vulnerability (CVE-2020-3993) NSX-T is a Software-Defined-Networking (SDN) solution of VMware which, as its basi... 2020-11-26 17:15:41 | 阅读: 342 | 收藏 | insinuator.net nsx bionic linux64 lcp deb

Having Fun with Google MDM Solution It’s Friday, you managed to escape for a couple of hours from a busy working day t... 2020-11-25 07:56:56 | 阅读: 186 | 收藏 | insinuator.net mdm jailbreak jailbroken malicious bypass

XSS Vulnerability in Froala WYSIWYG HTML Editor Recently, I had a brief look at the Froala WYSIWYG HTML Editor (v3.2.0) as there w... 2020-11-18 23:33:42 | 阅读: 329 | 收藏 | insinuator.net froala deadline moreover payload

Microsoft Office Telemetry: Report Release The German Federal Office for Information Security (orig., ger., Bundesamt für Sic... 2020-11-17 21:58:32 | 阅读: 356 | 收藏 | insinuator.net telemetry windows diagnostic produced microsoft

Forklift <=3.3.9 and <=3.4 Local Privilege Escalations on macOS (CVE-2020-15349/CVE-2020-27192) I have started to have a look at my local installed helpers on macOS. These helper... 2020-11-13 22:41:15 | 阅读: 316 | 收藏 | insinuator.net nsstring forklift library arg1 xpc

Reversing C++ Without Getting a Heart Attack – DEvirtualize VIrtual Calls With Devi read file error: read notes: is a directory... 2020-11-12 22:12:29 | 阅读: 548 | 收藏 | insinuator.net devi ghidra traces python interceptor

Apps on Prescription?! – Perspectives on Digital Health Applications (DiGA) Some time ago, we carried out an evaluation of the Digital Health Applications Ord... 2020-11-05 17:47:54 | 阅读: 266 | 收藏 | insinuator.net security digav processes bfarm

OpenSIS Vulnerabilities OpenSIS is an open source student information system. Recently, it was affected by... 2020-10-15 17:32:43 | 阅读: 277 | 收藏 | insinuator.net vals maintainer php cryptor corresponds

Vulnerabilities in GNU Readline Fixed Recently I discovered some vulnerabilities in GNU Readline. These bugs have been f... 2020-10-07 17:26:05 | 阅读: 233 | 收藏 | insinuator.net library readline libcrypto lib64 libssl

Doing it Server-Side with CypherDog 4.0 Arrroooo… Bloodhound Crew!! Heard the news? CypherDog 4.0 is out and it’s full of... 2020-09-18 06:11:59 | 阅读: 241 | 收藏 | insinuator.net cypher cypherdog retrieving cmdlet bloodhound

ERNW White Paper 69 – Safety Impact of Vulnerabilities in Insulin Pumps read file error: read notes: is a directory... 2020-09-11 18:39:20 | 阅读: 240 | 收藏 | insinuator.net pump insulin attacker security

How can data from fitness trackers be obtained and analyzed with a forensic approach? The use of Internet of Things devices is continuously increasing: People buy devic... 2020-09-10 16:24:19 | 阅读: 223 | 收藏 | insinuator.net fitness trackers analysis fitbit

Puppet Assessment Techniques Hardening guides for different systems that can be managed by Puppet are easy to f... 2020-09-09 22:16:55 | 阅读: 242 | 收藏 | insinuator.net puppet client 8140 puppetlabs

Java Buffer Overflow with ByteBuffer (CVE-2020-2803) and Mutable MethodType (CVE-2020-2805) Sandbox Escapes Years ago, Java could be used on websites trough applets. To make these applets se... 2020-09-02 16:54:25 | 阅读: 243 | 收藏 | insinuator.net methodtype bytebuffer confusion

Security Advisories for Nagios XI read file error: read notes: is a directory... 2020-07-30 20:57:20 | 阅读: 200 | 收藏 | insinuator.net nagios xi 15902 15903