@floyd_ch

@floyd@chaos.social

 @[email protected] on mastodo
shorturl.at/uvEY6
Joined August 2011
  • Tweets123
  • Following1
  • Followers1.7K
3Media
Multiple vulnerabilities in Lantronix EDS-MD IoT gateway for medical devices: pentagrid.ch/en/blog/multipl… #itsecurity #infosec #pentesting #lantronix #iot #medical

Multiple vulnerabilities in Lantronix EDS-MD IoT gateway for medical d

The Lantronix EDS-MS is an "IoT gateway for mission critical medical devices and equipment connectivity". It is affected by multiple vulnerabilities.

pentagrid.ch
1
4
1
4
2,316
♫ Ground control to Major Tom, take the patch and put secure mode on. ♫ github.com/pentagridsec/open… #openstage #openscape #unify

GitHub - pentagridsec/openstage-exploit-chain: Multiple vulnerabilities in Mitel Unify OpenStage...

Multiple vulnerabilities in Mitel Unify OpenStage and OpenScape phones allow a remote compromise in the unhardened default configuration and an elevation of privileges to become the root user. - pe...

github.com
2
1
351
RCE and LPE in a wide range of Mitel Unify #OpenStage and #OpenScape VoIP phones with default config: pentagrid.ch/en/blog/rce-and… #itsecurity #infosec #pentesting #voip #unify

Remote code execution and elevation of local privileges in Mitel Unify

Multiple vulnerabilities in Mitel Unify OpenStage and OpenScape phones allow a remote compromise in the unhardened default configuration and an elevation of privileges to become the root user.

pentagrid.ch
1
4
2
2,143
A few email-related Python libraries do not check server certificates. It is nothing new, but a bit surprisingly in 2023 and not everyone got the memo. pentagrid.ch/en/blog/python-… #itsecurity #infosec #pentesting #python #email #bugbounty

Nothing new, still broken, insecure by default since then: Python's e-

Python’s e-mail libraries smtplib, imaplib, and poplib do not verify server certificates unless a proper SSL context is passed to the API. This leads to security problems.

pentagrid.ch
3
2
310
The #Liferay Portal software < 7.4.3.88 respectively < 7.4.3.92 is affected by persistent cross-site-scripting vulnerabilities. pentagrid.ch/en/blog/stored-… #itsecurity #infosec #pentesting

Persistent cross-site scripting vulnerabilities in Liferay Portal

CVE-2023-42627, CVE-2023-42628, CVE-2023-42629: Several stored cross-site scripting vulnerabilities in Liferay Portal

pentagrid.ch
6
3,033
We wrote a tool in Python to create file archives such as zip, tar and cpio that include path traversal attacks: pentagrid.ch/en/blog/archive… #itsecurity #infosec #pentesting
4
2
383
We analysed the security of a #WindRiver #VxWorks (the operating system running also on NASA's Curiosity mars rover) embedded device and found a critical vulnerability in the #tarExtract function: pentagrid.ch/en/blog/wind-ri… #itsecurity #infosec #pentesting #cisa #vxworks

Wind River VxWorks tarExtract directory traversal vulnerability (CVE-2

CVE-2023-38346 is a directory traversal vulnerability in Wind River's tarExtract function in VxWorks discovered by Pentagrid during a penetration test and source code review.

pentagrid.ch
3
1
3
409
Wir haben uns das Liechtensteiner #Gesundheitsdossier und die zugrunde liegende Portal-Software #Liferay angeschaut. Im Ergebnis haben wir Verwundbarkeiten in Liferay gefunden und Schwächen im IT-Setup: pentagrid.ch/de/blog/it-sich… #itsicherheit #informationssicherheit #eHealth #eGD

IT-Sicherheit beim elektronischen Gesundheitsdossier im Fürstentum Lie

IT-Sicherheit beim elektronischen Gesundheitsdossier im Fürstentum Liechtenstein

pentagrid.ch
2
4
357
We had a look at Liechtenstein's electronic health files and the underlying #Liferay portal software and found some weaknesses in the portal software as well as risks in the IT setup. Full article (in German only): pentagrid.ch/de/blog/it-sich… #itsecurity #infosec #eHealth #eGD

IT-Sicherheit beim elektronischen Gesundheitsdossier im Fürstentum Lie

IT-Sicherheit beim elektronischen Gesundheitsdossier im Fürstentum Liechtenstein

pentagrid.ch
2
4
492
For some #Icinga #monitoring, we wrote a small plugin in Python that sends mail via SMTP and checks on another mail server via IMAP if the mail was received. Here is the code: github.com/pentagridsec/icin…

GitHub - pentagridsec/icinga_check_mail_loop: check_mail_loop.py is a Nagios/Icinga plugin that...

check_mail_loop.py is a Nagios/Icinga plugin that checks an end-to-end e-mail flow from sending an e-mail via SMTP to retrieving it from an IMAP server. - pentagridsec/icinga_check_mail_loop

github.com
2
4
429
Our advisory for Busybox cpio. When extracting cpio archives with BusyBox cpio, the cpio archiving tools may write files outside the destination directory and there is no option to prevent this. Full advisory: pentagrid.ch/en/blog/busybox… #itsecurity #infosec #pentesting #Busybox

Busybox cpio directory traversal vulnerability (CVE-2023-39810)

CVE-2023-39810 is a directory traversal vulnerability in Busybox cpio discovered by Pentagrid during a penetration test.

pentagrid.ch
3
4
463
As they are not responding to emails, we are looking for security contacts at Atos/Unify for #coordinatedDisclosure #responsibledisclosure purposes. Please help finding someone, the 2 week initial response deadline is ticking fast... #vulnerability
326
Our advisory for @ATENconnect's Power Distribution Unit PE8108 is public now. We found multiple vulnerabilities regarding authn and authz. Aten failed to provide a FW update within a 90 days after initial contact. pentagrid.ch/en/blog/multipl… #itsecurity #infosec #pentesting

Multiple vulnerabilities in Aten PE8108 power distribution unit

A Pentagrid security advisory about multiple vulnerabilities in the Aten PE8108 PDU remote power outlet control.

pentagrid.ch
1
6
11
3,791
Published advisory for Viseca, one of the larger credit card issuers in CH/FL. Vulnerability to download credit card statements (other business customers) -> coordinated disclosure Advisory: pentagrid.ch/en/blog/viseca-… Republik (German): republik.ch/2023/03/20/kredi… #itsecurity #infosec

Credit card statement disclosure vulnerability in Viseca's eXpense por

As a security company we try to use services that are solid, trustworthy and secure and therefore we do our due diligence if we find the time for it. Checking products for IT security issues in a non-

pentagrid.ch
6
1
6
3,510
Replying to @veorq
I remember another tool that had funny command line args :D ;) There's probably plenty of bugs for command line openssl. Why not run @aflplusplus with command line argument fuzzing setup as I did with argon2? github.com/P-H-C/phc-winner-…

Segmentation fault on -m 94 -m 95 · Issue #5 · P-H-C/phc-winner-argon2

So I've run fuzzing tests with American Fuzzy Lop (AFL, http://lcamtuf.coredump.cx/afl/ ), as argon2 takes all it's arguments from command line I used the argv fuzzer included in AFL (in ex...

github.com
1
2
3
277
Why are you still here? techcrunch.com/2022/12/15/tw…
2
1
974
Today is tool day. We are releasing our #Python #SMSGateway tool. Attach your #modempool or your old #Surfsticks from the grab box, insert SIM cards and forward #SMS to your e-mail box. And why not using it for @icinga SMS alerts? #pentesting #monitoring pentagrid.ch/en/blog/open-so…

An open source SMS gateway for pentest projects

We publish an open source Python-based self-hosted SMS gateway for sending and especially receiving SMS using multiple GSM modems and SIM cards, which helps us in pentesting projects, but also for ale

pentagrid.ch
16
18
We conducted a security analysis of the secure e-mail software @SEPPmail 11.1.10 and found multiple vulnerabilities that have been fixed (and hopefully widely applied) by now pentagrid.ch/en/blog/multipl… #itsecurity #infosec #pentesting

Multiple vulnerabilities in SEPPmail 11.1.10

An advisory about multiple vulnerabilities in SEPPmail version 11.1.10.

pentagrid.ch
1
8
11
We are also on #Mastodon: @[email protected] See you there!
2
2
Load more