SSD Advisory – GitStack Unauthenticated Remote Code Execution

Vulnerability Summary The following advisory describes an unauthenticated action that allows a remote attacker to add a user to GitStack and then used to trigger an unauthenticated remote code execution. GitStack is “a software that lets you setu… Continue reading SSD Advisory – GitStack Unauthenticated Remote Code Execution

SSD Advisory – Seagate Personal Cloud Multiple Vulnerabilities

Vulnerabilities summary The following advisory describes two (2) unauthenticated command injection vulnerabilities. Seagate Personal Cloud Home Media Storage is “the easiest way to store, organize, stream and share all your music, movies, photos,… Continue reading SSD Advisory – Seagate Personal Cloud Multiple Vulnerabilities

SSD Advisory – Sophos XG from Unauthenticated Persistent XSS to Unauthorized Root Access

Vulnerability Summary The following advisory describes an unauthenticated persistent XSS that leads to unauthorized root access found in Sophos XG version 17. Sophos XG Firewall “provides unprecedented visibility into your network, users, and app… Continue reading SSD Advisory – Sophos XG from Unauthenticated Persistent XSS to Unauthorized Root Access

SSD Advisory – Livebox Fibra (Orange Router) Multiple Vulnerabilities

Vulnerabilities Summary The following advisory describes four (4) vulnerabilities found in Livebox Fibra router version AR_LBFIBRA\_sp-00.03.04.112S. It is possible to chain the vulnerabilities into remote code execution. The “Livebox Fibra&#8221… Continue reading SSD Advisory – Livebox Fibra (Orange Router) Multiple Vulnerabilities

SSD Advisory – D-Link DSL-6850U Multiple Vulnerabilities

Vulnerabilities Summary The following advisory describes two (2) vulnerabilities found in D-Link DSL-6850U versions BZ_1.00.01 – BZ_1.00.09. D-Link DSL-6850U is a router “manufactured by D-Link for Bezeq in Israel” The vulnerabilities… Continue reading SSD Advisory – D-Link DSL-6850U Multiple Vulnerabilities

SSD安全公告-vBulletin routestring未经验证的远程代码执行

漏洞概要 以下安全公告描述了在vBulletin5中发现的一个未经身份验证的文件包&… Continue reading SSD安全公告-vBulletin routestring未经验证的远程代码执行

SSD Advisory – Kingsoft Antivirus/Internet Security 9+ Privilege Escalation

Vulnerability Summary The following advisory describes a kernel stack buffer overflow that leads to privilege escalation found in Kingsoft Antivirus/Internet Security 9+. Kingsoft Antivirus “provides effective and efficient protection solution at… Continue reading SSD Advisory – Kingsoft Antivirus/Internet Security 9+ Privilege Escalation