This is the third part of our article series that intended to share my real-life penetration testing experience.In this article, I will share a whole process of how we managed to find a -0day- pre-auth RCE vulnerability on another SIEM product.
(more…)metasploit
0day advisory alloydb aurora authentication clickhouse cve cyber django exploit extension hacking hll hyperloglog logpoint metasploit middleware neondb paas postgis postgres postgresql product security supabase vulnerability
-
Advisory | CVE-2017-6398 Trend Micro InterScan Messaging Security (Virtual Appliance) Remote Code Execution
In this article, we will show details and metasploit module for vulnerability that affects Trend Micro’s IMSVA solution.
(more…) -
Unexpected Journey into the AlienVault OSSIM/USM During Engagement
Being a penetration tester makes us feel like a group of traveler. Discovering the internal world of the institution during engagement gives us the opportunity to make unexpected journeys. In this article, I will share a details of how we got an access to the heart of the company.
(more…)
