Vulnerability in Sophos Suite
CVE CVE-2021-25269 Vulnerable Software HitmanPro.Alert Agent (Sophos Suite) before 3.8.1.504 Vulnerability An insufficient configuration of the service allows […]
Blog
16 posts
Vulnerability in Datev
CVE pending Vulnerable Software Both Update Manager up to version 5.8.0.2300 and DFL up to version 12.5.1001.5 are […]
Vulnerability in Panda Security Product
CVE pending Vulnerable Software Agent (<=1.16.11) for Panda Adaptive Defense 360 <= Version 8.0.17 Vulnerability The Agent for […]
Vulnerability in Cordaware bestinformed
CVE CVE-2021-3168 Vulnerable Software Cordaware bestinformed <= Version 5.1.0.3 Vulnerability A Unquoted service path in Cordaware bestinformed software […]
Vulnerability in Monitoring Software
CVE CVE-2020-13912 Vulnerable Software SolarWinds “Advanced Monitoring Agent” prior to 10.8.9 Vulnerability Insufficient Permissions/ Privilege Escalation Time Line […]
Too much cyber, too little security!
The number of cyber attacks, the associated damage and the professionalism of the perpetrators continues to increase. Therefore, […]
From AWAE to OSWE: The Preperation Guide
As promised on Twitter this post will document my steps through the OSWE exam preperation. Searching for available […]
Best Practise: Intel Unquoted Service Path
Affected Software Intel Management Interface <= 1815.12.0.2021 Issue In my last assessment i discovered an unquoted service path […]
CVE-2019-12763: Insecure Data Storage Security Camera CZ
CVE CVE-2019-12763 Vulnerable Software Android App: Security Camera CZ <= 1.6.8 Vulnerability Insecure Data Storage (M2, OWASP Mobile […]
SmartScreen Bypass = weirdo?
During my last assessment i discovered a strange behaviour of Microsoft’s SmartScreen feature.In general this security feature should […]