PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Big Monitoring Fabric Application

bishopfox.com | blog | #privilege-escalation | #xss | #network-security | #advisory | #big-switch-networks
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Advisory on two high-risk flaws in Big Switch Networks' Big Monitoring Fabric: XSS granting unauthenticated admin and SSH access, and info disclosure letting read-only users escalate.
Published
Collected

Related coverage

research · slcyber.io
Advisory: Citrix Gateway Open Redirect and XSS (CVE-2023-24488)
# Advisory: Citrix Gateway Open Redirect and XSS (CVE-2023-24488) Get research alerts Share on social ) June 29, 2023 1 min read ### Table of Contents TOC Element Summary Impact Affected Software...
research · slcyber.io
Advisory: Reflected Cross-Site Scripting in cPanel (CVE-2023-29489)
# Advisory: Reflected Cross-Site Scripting in cPanel (CVE-2023-29489) Get research alerts Share on social ) April 26, 2023 2 min read ### Table of Contents TOC Element Impact Affected Software...
blog · blog.quarkslab.com
Overview of Passive Optical Networks (PONs) Security
Passive Optical Networks (PONs) connect end-users to infrastructure using optical fibre in the last kilometre (Fibre-to-the-x). This article provides a technical overview of the security features in ITU-T specifications: Gigabit-capable PON (GPON), 10-Gigabit-capable PON (XG-PON), 10-Gigabit-capable Symmetric PON (XGS-PON), Next-generation PON 2 (NG-PON2), and 50-Gigabit-capable PON (50G-PON). The analysis covers authentication schemes, key derivation, encryption methods, and associated security implications.
blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
blog · hunt.io
Over 68 GB of Philippine Overseas-Employment Database Backups Copied From an Exposed Staging Server
An exposed staging server at UpCloud revealed a completed 68 GB copy of 27 Philippine overseas-employment database backups, a rebranded GodPotato privilege escalation tool, and the operator's own transfer logs.
blog · semperis.com
AD Group Risks: How Cryptographic Operators Dangers Escalate Quickly
At first glance, the Cryptographic Operators group doesn’t look scary. But it sits dangerously close to the systems that define trust—and in Windows, trust is everything. Here’s how to head off risk in your environment.
Back