Alireza Gharib Blog

Category: Vulnerabilities

January 4, 2025

RedTeam Pentesting has two new members: Severin Schüller and Vincent Drury reinforce the team as new penetration testers.

RedTeam Pentesting has two new members: Severin Schüller and Vincent Drury reinforce the team as new penetration testers. Go to Source

Cybersecurity, Security, Vulnerabilities

#cybersecurity, #penetration, #penetrationtesting, #red_team, #red_teaming, #redteaming, #security
January 4, 2025

We’ve published a blog post about a vulnerability we’ve discovered in Bitwarden at the beginning of 2023. It allowed accessing data from the vault without the password in certain circumstances.

We’ve published a blog post about a vulnerability we’ve discovered in Bitwarden at the beginning of 2023. It allowed accessing data from the vault without the password in certain circumstances. Go to Source

Cybersecurity, Security, Vulnerabilities

#ai, #cybersecurity, #penetration, #penetrationtesting, #red_team, #red_teaming, #redteaming, #security
January 4, 2025

New advisory released: Session Token Enumeration in RWS WorldServer.

New advisory released: Session Token Enumeration in RWS WorldServer. Go to Source

Cybersecurity, Security, Vulnerabilities

#cybersecurity, #penetration, #penetrationtesting, #red_team, #red_teaming, #redteaming, #security
January 4, 2025

On 2 October 2023 Jens Liebchen held the talk “Gezielter Ausnahmezustand – Penetrationstests” as part of the event Fachschaftstagung Ingenieurswissenschaften of the Cusanuswerk. The German language slides are available for download under Publications.

On 2 October 2023 Jens Liebchen held the talk “Gezielter Ausnahmezustand – Penetrationstests” as part of the event Fachschaftstagung Ingenieurswissenschaften of the Cusanuswerk. The German language slides are available for download under Publications. Go to Source

Cybersecurity, Security, Vulnerabilities

#ai, #cybersecurity, #penetration, #penetrationtesting, #red_team, #red_teaming, #redteaming, #security
January 4, 2025

New advisory released: D-Link DAP-X1860: Remote Command Injection .

New advisory released: D-Link DAP-X1860: Remote Command Injection . Go to Source

Cybersecurity, Security, Vulnerabilities

#cybersecurity, #penetration, #penetrationtesting, #red_team, #red_teaming, #redteaming, #security
January 4, 2025

Our new blog post gives an overview of exploiting vulnerabilities in Ghostscript.

Our new blog post gives an overview of exploiting vulnerabilities in Ghostscript. Go to Source

Cybersecurity, Security, Vulnerabilities

#cybersecurity, #penetration, #penetrationtesting, #red_team, #red_teaming, #redteaming, #security
January 4, 2025

New advisory released: STARFACE: Authentication with Password Hash Possible.

New advisory released: STARFACE: Authentication with Password Hash Possible. Go to Source

Cybersecurity, Security, Vulnerabilities

#cybersecurity, #penetration, #penetrationtesting, #red_team, #red_teaming, #redteaming, #security
January 4, 2025

In our new blog post we discuss common misconceptions about login mechanisms using the example of a vulnerability in the web interface of STARFACE PBX.

In our new blog post we discuss common misconceptions about login mechanisms using the example of a vulnerability in the web interface of STARFACE PBX. Go to Source

Cybersecurity, Security, Vulnerabilities

#cybersecurity, #penetration, #penetrationtesting, #red_team, #red_teaming, #redteaming, #security
January 4, 2025

A new version of monsoon has been released. Our new blog post covers the new features and improvements in detail.

A new version of monsoon has been released. Our new blog post covers the new features and improvements in detail. Go to Source

Cybersecurity, Security, Vulnerabilities

#ai, #cybersecurity, #penetration, #penetrationtesting, #red_team, #red_teaming, #redteaming, #security