Recent Curesec Publications

Recent Archive Entries

Tap 'n' Sniff #2 - How to create your own sniffer firmware and sniff on an enterprise MFP
Tutorial on exploiting an ALLNET ALLBM100VDSL2V modem
Smartwares C935IP Camera: SSL Vunerability
Detecting the Smartwares C935IP SSL Vulnerability
VDSL Client Modem ALL-BM100VDSL2: CSRF

phplist 3.2.6: XSS
phplist 3.2.6: SQL Injection
Elefant CMS 1.3.12-RC: CSRF
Elefant CMS 1.3.12-RC: Multiple Persistent and Reflected XSS
Elefant CMS 1.3.12-RC: Open Redirect, Host Header Injection, Leakage of Password Hashes
Elefant CMS 1.3.12-RC: Code Execution

The HS-110 Smart Plug aka Projekt Kasa
MyLittleForum 2.3.6.1: XSS & RPO
SPIP 3.1: XSS & Host Header Injection
Mezzanine 4.2.0: XSS
MyLittleForum 2.3.6.1: CSRF
MoinMoin 1.9.8: XSS
Lepton 2.2.2: SQL Injection
Lepton 2.2.2: CSRF, Open Redirect, Insecure Bruteforce Protection & Password Handling
Lepton 2.2.2: Code Execution
Jaws 1.1.1: Code Execution
FUDforum 3.0.6: Multiple Persistent XSS & Login CSRF
Jaws 1.1.1: Object Injection, Open Redirect, Cookie Flags
FUDforum 3.0.6: LFI
Security Implications of GET/POST Interchangeability

Powered by CurePress 1.18