Slándáil Research: Security Feeds

Feed: Exodus Intel Blog

Vulnerability Assessment Course – Summer 2024

Public Mobile Exploitation Training – Summer 2024

Public Browser Exploitation Training – Summer 2024

Mind the Patch Gap: Exploiting an io_uring Vulnerability in Ubuntu

D-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability

D-Link DAP-1650 SUBSCRIBE ‘Callback’ Command Injection Vulnerability

Motorola MR2600 ‘SaveSysLogParams’ Command Injection Vulnerability

Motorola MR2600 ‘SaveStaticRouteIPv6Params’ Command Injection Vulnerability

Motorola MR2600 ‘SaveStaticRouteIPv4Params’ Command Injection Vulnerability

Motorola MR2600 Authentication Bypass Vulnerability

Motorola MR2600 Arbitrary Firmware Upload Vulnerability

Arris SURFboard SBG6950AC2 Arbitrary Command Execution Vulnerability

IBM Merge Healthcare eFilm Workstation Hardcoded Credentials

IBM Merge Healthcare eFilm Workstation License Server Buffer Overflow

Google Chrome V8 CVE-2024-0517 Out-of-Bounds Write Code Execution

Delta Electronics Delta Industrial Automation DOPSoft DPS File wTextLen Buffer Overflow Remote Code Execution

Delta Electronics Delta Industrial Automation DOPSoft DPS File InitialMacroLen Buffer Overflow Remote Code Execution

Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesPrevValueLen Buffer Overflow Remote Code Execution

Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesActionLen Buffer Overflow Remote Code Execution

Delta Electronics Delta Industrial Automation DOPSoft DPS File wTTitleLen Buffer Overflow Remote Code Execution

Delta Electronics Delta Industrial Automation DOPSoft DPS File wTitleTextLen Buffer Overflow Remote Code Execution

Delta Electronics ISPSoft Heap Buffer-Overflow

Delta Electronics Delta Industrial Automation DOPSoft DPS File wScreenDESCTextLen Buffer Overflow Remote Code Execution

Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesTimeLen Buffer Overflow Remote Code Execution

Delta Electronics Delta Industrial Automation DOPSoft DPS File wMailContentLen Buffer Overflow Remote Code Execution

Safari, Hold Still for NaN Minutes!

Juplink RX4-1500 Hard-coded Credential Vulnerability

Juplink RX4-1500 Command Injection Vulnerability

Juplink RX4-1500 homemng Command Injection Vulnerability

Juplink RX4-1500 Credential Disclosure Vulnerability

Juplink RX4-1500 Stack-based Buffer Overflow Vulnerability

Public Mobile Exploitation Training – Fall 2023

Public Browser Exploitation Training – Fall 2023

Shifting boundaries: Exploiting an Integer Overflow in Apple Safari

Google Chrome V8 ArrayShift Race Condition Remote Code Execution

Why Choose Exodus Intelligence for Enhanced Vulnerability Management?

Escaping Adobe Sandbox: Exploiting an Integer Overflow in Microsoft Windows Crypto Provider

An Unpatched Vulnerability, A Substantial Liability

The Death Star Needed Vulnerability Intelligence

Everything Old Is New Again

CISA Urges Caution, One Year On From Invasion of Ukraine

Exodus Intelligence Launches EVE Vulnerability Intelligence Platform Targeting Commercial Enterprises

Vulnerability Assessment Course – Spring 2023

Exodus Intelligence has been authorized by the CVE Program as a CVE Numbering Authority (CNA).

All-time High Cybersecurity Attrition + Economic Uncertainty = Happy(ish) New Year

CloudLinux LVE kernel module (kmod-lve) Reference Counter Overflow

SonicWall SMA 500v and SMA 100 Series Firmware Heap Buffer Overflow

Schneider Electric SoMachine HVAC ActiveX Control Information Disclosure Vulnerability

Linux Kernel: Exploiting a Netfilter Use-after-Free in kmalloc-cg

TP-Link WA850RE Unauthenticated Configuration Disclosure Vulnerability

TP-Link WA850RE Remote Command Injection Vulnerability

TP-Link WR940N/WR941ND Uninitialized Pointer Vulnerability

Mitel 3300 Controller HTTP Buffer Overflow Vulnerability

Mitel Web Management Interface Buffer Overflow Vulnerability

SalesAgility SuiteCRM ‘deleteAttachment’ Type Confusion Vulnerability

SalesAgility SuiteCRM ‘export’ Request SQL Injection Vulnerability

D-Link DIR-1260 GetDeviceSettings Pre-Auth Command Injection Vulnerability

Exodus Wants to help CISA Shields Up

Exodus Answers Biden’s Call to Action

Exploiting a use-after-free in Windows Common Logging File System (CLFS)

Advantech iView ztp_search_value Parameter SQL Injection Remote Code Execution Vulnerability

Advantech iView data Parameter SQL Injection Information Disclosure

Advantech iView data Parameter SQL Injection Information Disclosure Vulnerability

Advantech iView search_term Parameter SQL Injection Remote Code Execution Vulnerability

Advantech iView getInventoryReportData Parameter SQL Injection Information Disclosure

Advantech iView getInventoryReportData Parameter SQL Injection Information Disclosure Vulnerability

Advantech iView ztp_config_id Parameter SQL Injection Information Disclosure Vulnerability

Xerox DocueShare AMI Pro File Parsing Stack Overflow Vulnerability

Xerox DocuShare AMI Pro File Parsing Stack Overflow Vulnerability

Xerox DocuShare WordPerfect Parsing Stack Overflow Vulnerability

Xerox DocuShare AMI Pro p-tag Parsing Stack Overflow Vulnerability

ZyXEL Armor Cross-Site Request Forgery Vulnerability

ZyXEL Armor Photobak Command Injection Vulnerability

Zlibc Environment Variable Handling Local Privilege Escalation Vulnerability

Arris SURFboard SSDP Command Injection Vulnerability

LiveAction LiveNX AWS Credential Disclosure Vulnerability

UltraVNC Viewer VNC client RFB SolidColor Arbitrary Write Vulnerability

UltraVNC Viewer VNC client RFB rfbServerInitMsg Heap Overflow Vulnerability

UltraVNC Viewer VNC client RFB ReadUltraRect Heap Overflow Vulnerability

UltraVNC Viewer VNC client Remote Memory Leak Vulnerability

NEC EXPRESSCLUSTER X Transaction Server 0x32 File Read

NEC EXPRESSCLUSTER X Transaction Server 0x32 File Read Vulnerability

NEC EXPRESSCLUSTER X Web Manager File Upload

NEC EXPRESSCLUSTER X Web Manager File Upload Vulnerability

NEC EXPRESSCLUSTER X Web Manager Command Execution

NEC EXPRESSCLUSTER X Web Manager Command Execution Vulnerability

NEC EXPRESSCLUSTER X Old API Server 0x1D Stack Overflow

NEC EXPRESSCLUSTER X Old API Server 0x1D Stack Overflow Vulnerability

NEC EXPRESSCLUSTER X Transaction Server 0x32 Stack Overflow

NEC EXPRESSCLUSTER X Transaction Server 0x32 Stack Overflow Vulnerability

NEC EXPRESSCLUSTER X Transaction Server 0x3A Stack Overflow

NEC EXPRESSCLUSTER X Disk Agent 0x104 Stack Overflow

NEC EXPRESSCLUSTER X Disk Agent 0x103 Stack Overflow

Analysis of a Heap Buffer-Overflow Vulnerability in Adobe Acrobat Reader DC

SolarWinds Serv-u File Server Command Injection

Adobe Acrobat Reader Base URI Unicode String Heap Buffer Overflow

McAfee DLP Agent Stack Buffer Overflow RCE

Foxit PhantomPDF ConvertToPDF Arbitrary File Write Remote Code Execution Vulnerability

Foxit PhantomPDF CombineFiles Arbitrary File Write Remote Code Execution Vulnerability

Foxit PhantomPDF ConnectedPDF DocSearch_Locator_Table SQL Injection Remote Code Execution Vulnerability

Foxit PhantomPDF ConnectedPDF ConnectedPDF_DRM_Table SQL Injection Remote Code Execution Vulnerability

Foxit PhantomPDF ConnectedPDF DocUpdate_Notify_Table SQL Injection Remote Code Execution Vulnerability

Foxit PhantomPDF extractPages Arbitrary File Write Remote Code Execution Vulnerability

Foxit PhantomPDF loadHtmlView Context Level Bypass Vulnerability

Vulnerability Development Courses for 2021

Analysis of a Heap Buffer-Overflow Vulnerability in Microsoft Windows Address Book