Vulnerability in Monitoring Software
CVE CVE-2020-13912 Vulnerable Software SolarWinds “Advanced Monitoring Agent” prior to 10.8.9 Vulnerability Insufficient Permissions/ Privilege Escalation Time Line […]
Blog
12 posts
Too much cyber, too little security!
The number of cyber attacks, the associated damage and the professionalism of the perpetrators continues to increase. Therefore, […]
From AWAE to OSWE: The Preperation Guide
As promised on Twitter this post will document my steps through the OSWE exam preperation. Searching for available […]
Best Practise: Intel Unquoted Service Path
Affected Software Intel Management Interface <= 1815.12.0.2021 Issue In my last assessment i discovered an unquoted service path […]
CVE-2019-12763: Insecure Data Storage Security Camera CZ
CVE CVE-2019-12763 Vulnerable Software Android App: Security Camera CZ <= 1.6.8 Vulnerability Insecure Data Storage (M2, OWASP Mobile […]
SmartScreen Bypass = weirdo?
During my last assessment i discovered a strange behaviour of Microsoft’s SmartScreen feature.In general this security feature should […]
HMV-01: Auto-Generated Screenshots
Description Applications which go to background are screenshoted per default for a better user experience. Unfortunately other apps […]
HanseSecure as one of the Top 21 (twice ;-)
It’s quite funny that two independent companies named the “21” Cybersecurity and Redteaming resources world wide. But i […]
New InfoSec Team spawned: BreachedSec
I decided to set up a new team of infosec professionals, because of a lot of project requests […]
CVE-2018-16231: Remote DoS in Personal FTP-Server <= 8.4f
CVE CVE-2018-16231 Vulnerable Software FTP-Server <= 8.4f Vulnerability Remote Denial of Service Time Line 30.01.2018 Vendor informed (local […]