Offensity continuously checks the customers' externally accessible IT systems for vulnerabilities, evaluates their risks & provides actionable recommendations.
Vienna, Austria
Joined November 2017
- Tweets75
- Following22
- Followers258
- Likes27
Dear parents,
we are somewhat sorry to announce that our colleague Manuel found a way for your kids to easily get around the Screen Time PIN protection. It also seems, that Apple is not in a rush to fix this issue. Learn more about how he did it here:
manuel.reinsperger.org/blog/…
We have a new payment method available for Offensity Professional:
offensity.com/en/blog/card-p…
Authenticated persistent XSS in Liferay DXP CMS (CVE-2022-38901 and CVE-2022-38902)
offensity.com/en/blog/authen…
Hey Twitter,
if you like our SaaS Vulnerability Scanner please give us a review on G2.
g2.com/products/offensity/re…
Offensity retweeted
Wer darf bei Europas größter #Fachmesse für #IT-#Sicherheit nicht fehlen? Wir – und Sie natürlich. Sichern Sie sich also jetzt Ihr kostenloses Ticket und besuchen Sie uns auf unserem #Messestand auf der it-sa 2022 in #Nürnberg: a1.digital/de/events/it-sa-2… Wir freuen uns auf Sie!
Authenticated Insecure Direct Object Reference in Kentico CMS (CVE-2022-29287)
CVSS 4.9
Credits to @stiefel40k
offensity.com/en/blog/authen…
exe-files with broad write-permissions on #SMB #shares might be overwritten by #attackers to gain higher privileges in a #windowsdomain.
#OffensityPrime crawls SMB shares and notifies you if sensitive files are found.
#cybersecurity #vulnscans #adsecurity #privilegeescalation
Genesys iWD Manager Authenticated SQL injection (CVE-2021-40860 and CVE-2021-40861)
CVSS 8.7
Credits to @stiefel40k
offensity.com/en/blog/authen…
Active Directory integrated DNS allows "Authenticated Users" to create new DNS A-records, even wildcards.
This is crazy.
Attackers could create *.lab.local
#OffensityPrime rates this as a high issue.
#adsecurity #activedirectory #cybersecurity #pentesting
Does anyone have an overview about his AD security?
Just started our closed alpha phase for Offensity Prime.
Here's a short preview.
(and there will be a free version)
#cybersecurity #adsecurity #vulnerabilityscan #offensityprime
We fully integrated @pdnuclei into Offensity Free.
Running full port scans, crawler, web tech detection and depending on the technology, nuclei templates are executed.
#websecurity #cybersecurity #vulnscanner #offensity
Offensity Free also easily detects http request smuggling attacks. @AronMolnar2 from our team explains how those attacks work.
youtube.com/watch?v=mijOcGLn…
#httpsmuggling #desync #cybersecurity #hacking
We released a number of features like on-demand scanning, custom scanning intervals and scan settings.
What scan settings are you missing?
We just released Offensity Free including our full scanning capabilities.
offensity.com/en/pricing/
Apache #PathTraversal (CVE-2021-41773) was checked for all of our customers.
Offensity users can also check their Apache versions manually at reporting.offensity.com/repo…
"How Red Bull deals with cyber threats"
We are proud that we were able to win Red Bull to host a webinar on vulnerability management together with us. (german language)
Sign up at a1.digital/ueber-a1-digital/…
Hackers leak passwords for 500,000 Fortinet VPN accounts
Offensity customers have already been notified.
bleepingcomputer.com/news/se…
3553 von 9980 Microsoft Exchange-Servern in Österreich sind noch akut angreifbar
offensity.com/de/blog/update…
#proxylogon