Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Set Sail: Remote Code Execution in SailPoint IQService via Default Encryption Key

netspi.com | vulnerability | #rce | #encryption | #default-credentials | #iam | #sailpoint | #iqservice | #network-pentesting

Summary

SailPoint IQService before the May 2025 update allows RCE with default settings: the RPC server uses a hard-coded key without authentication or TLS, letting attackers execute arbitrary code.
Published
Collected

original ↗

Related coverage

vulnerability · netspi.com
CVE-2024-28989: Weak Encryption Key Management in Solar Winds Web Help Desk
CVE-2024-28989: SolarWinds Web Help Desk uses predictable AES-GCM keys—some static, some from a restricted keyspace—so an attacker with a backup file can recover stored passwords. Fixed in 12.8.5.
vulnerability · netspi.com
Cisco ASA Remote Code Execution – Verifying CVE-2016-1287
Walks through verifying CVE-2016-1287, an unauthenticated remote code execution flaw in Cisco ASA's IKE fragment reassembly, with a Python tool that distinguishes vulnerable from patched devices.
vulnerability · bishopfox.com
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326
CVE-2026-28326 is an unauthenticated RCE in SolarWinds ARM where a hardcoded shared secret on TCP 55555 leads to SYSTEM-level code execution. Patch now.
High · vulnerability · xbow.com
Cooking an SQL Injection Vulnerability in Chef Automate
Details an SQL injection in Chef Automate found via a little-known default data-collector token, letting authenticated attackers run arbitrary SQL against its PostgreSQL database.
vulnerability · yeswehack.com
ZeroDisclo.com: Vulnerability disclosure done right
ZeroDisclo.com, a non-profit platform relaying encrypted, anonymous vulnerability reports to CERTs, redesigned its site with clearer submission forms, an FAQ and a concise disclosure policy.
vulnerability · hackerone.com
The Tale of the Privacy Pink Panther
A HackerOne employee recounts being required to power up and unlock a laptop at Paris CDG airport — and why full-disk encryption plus HackerOne's data practices kept customers safe.
back