Security Research Group https://xitter.cf/t.co/2JurJNVCqK
Berlin, Germany
Joined February 2024
- Tweets16
- Following948
- Followers3.5K
- Likes1.3K
CVE-2025-9959: smolagents Python Sandbox Escape
hazardlab.substack.com/publi…
Python sandbox implementations often focus on blocking dangerous attribute access patterns like `obj.__class__` but forget that the same introspection is achievable through method invocation.
#python #cve
Hazard Lab retweeted
CVE-2024-23780
CVE-2024-23780 Exploit for Netbox
This script exploits CVE-2024-23780, which allows remote code execution (RCE) on Netbox instances.
Usage
python netbox_exploit.py --url --username --password
vulmon.com/vulnerabilitydeta…
Hazard Lab retweeted
Unveiling CVE-2024-23780: Explore the Impact and Implications on NetBox's Security Landscape.
hazardlab.io/netbox-cve-2024…
POC: github.com/HazardLab-IO/CVE-…
Fofa: en.fofa.info/result?qbase64=…
#netbox #security #network #devops #infrastructure #cve #exploit
Hazard Lab retweeted
Hazard Lab delves into the intricate vulnerabilities of ManageEngine ADAudit Plus with their comprehensive exploration of CVE-2023-50438.
hazardlab.io/manageengine-ad…
#adaudit #manageengine #activedirectory #cve #vulnerability #asm
Hazard Lab retweeted
We've published our writeup of CVE-2024-20693, a vulnerability in Windows that allowed spoofing the code signature of binaries by placing them on an SMB share. This research originally was about something different, but we ran into a signature check...
sector7.computest.nl/post/20…
Hazard Lab retweeted
📣 PHP 最新發布的安全更新，修補由 DEVCORE 回報的重大 RCE 零時差漏洞 CVE-2024-4577。漏洞影響範圍包含 Windows 作業系統上繁體中文、簡體中文、日文三個語系的所有 PHP 版本。
請相關使用者儘速參考 PHP 官方及 DEVCORE Blog 檢查及更新。
devco.re/blog/2024/06/06/sec…
