PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Product Updates from our CTO

horizon3.ai | research | #vulnerability-research | #product-update | #announcement | #horizon3
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The engineering team has been working tirelessly to improve the “what to wow” user experience, add more attack content, add indicators of best practices and…
Published
Collected

Related coverage

vulnerability · horizon3.ai
Understanding Log4Shell: the Apache log4j2 Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046)
Understanding Log4Shell: the Apache log4j2 Remote Code Execution Vulnerability (CVE-2021-44228)…
vulnerability · horizon3.ai
[CVE-2021-41765] Multiple Vulnerabilities in ResourceSpace
Advisory for CVE-2021-41765, a critical SQL injection vulnerability leading to remote code execution, by the Horizon3 red team.
vulnerability · horizon3.ai
[CVE-2020-3952] Compromising vCenter via SAML Certificates
A common attack path that Horizon3 has identified across many of its customers is abusing access to the VMware vCenter Identity Provider (IdP) certificate.
vulnerability · horizon3.ai
[CVE-2021-38647] OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments
# OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments Zach Hanley September 16, 2021 Attack Blogs Overview On September 14, multiple vulnerabilities were discovered by researchers at...
vulnerability · horizon3.ai
Confluence Server OGNL Injection: CVE-2021-26084
On August 25, 2021, Atlassian released a security advisory for CVE-2021-26084, an OGNL injection vulnerability found within a component of Confluence Server and…
vulnerability · horizon3.ai
[CVE-2021-34473] ProxyShell: More Ways for More Shells
In August, Orange Tsai released details and also spoke at BlackHat and DEFCON detailing his security research into Microsoft Exchange. His latest blog post…
Back