@TrapaSecurity

Advance Cybersecurity Awareness.

 Taiwan
trapa.tw/
Joined August 2020
  • Tweets8
  • Following4
  • Followers530
2Media
Zyxel fixed multiple vulnerabilities reported by our research team on February 20th, including CVE-2023-6764, a WAN side Pre-Auth RCE in the IPSec VPN service. Update your Zyxel Firewall and AP ASAP. zyxel.com/global/en/support/…
8
26
3,810
Zyxel fixed two Pre-Auth RCEs (CVE-2023-33009, CVE-2023-33010) reported by our research team. Like CVE-2023-28771, both vulnerabilities are exploitable from the WAN side. Update your Zyxel Firewall ASAP. also kudos to @starlabs_sg zyxel.com/global/en/support/…
1
8
41
6,139
Demo video out for Zyxel VPN Pre-Auth RCE (CVE-2023-28771) No extra config or web access needed, exploitable via WAN. More details will be released, patch your device ASAP. youtu.be/R68QJIRSwU0
2
24
2
37
8,777
We have reported a critical Pre-Auth RCE in Zyxel VPN Firewall (CVE-2023-28771) The device can be exploited as soon as it connects to the internet, without any additional configuration. Patch your Zyxel devices as soon as possible. thehackernews.com/2023/04/zy…

Zyxel Firewall Devices Vulnerable to Remote Code Execution Attacks — Patch Now

Zyxel releases critical security patches for firewall devices. Flaw could allow remote code execution on affected systems.

thehackernews.com
2
45
7
93
88,326
Confirmed! The team of @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity used a command injection bug to take over the #NETGEAR router and get root. They win $5,000 and 1 Master of Pwn point.
1
5
5
23
Confirmed! The @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity team combined an auth bypass and a command injection bug to get root on the Western Digital NAS. They win $20K and 2 point towards Master of Pwn.
9
2
28
The next attempt will see @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity target the Western Digital My Cloud Pro. They start at 1200 Eastern (UTC-4). It's the 1st NAS entry in #Pwn2Own history! #P2OTokyo
1
9
1
25
Load more