PinnedKonstantin Burov·2d agoCheck Point Scalable Platforms Privilege Escalation via RCE and Arbitrary File WriteOn Check Point R82 security gateways with ElasticXL enabled and Maestro SGMs (all versions), an attacker with Access Policy / NAT write priv
PinnedKonstantin Burov·Sep 12, 2022Wapples Web Application Firewall Multiple VulnerabilitiesRemote command execution, hardcoded credentials, backdoored OS account and privilege escalation — All in One vulnerable WAF!
PinnedKonstantin Burov·Nov 2, 2021Veeam Backup & “Penetration” — Getting the most out of PenTestVeeam — is a pretty cool tool for backing up VM’s. But did you know that it might be a great source of credentials to extract?
Konstantin Burov·Sep 12, 2023Over 1800 Telegram proxies are potentially vulnerable to RCE since 2018The “Erlang mtproto proxy” Github project, which implements the functionality of the Telegram MTProxy protocol on Erlang by Sergey…
Konstantin Burov·Dec 2, 2022File extension bypass in Responsive FileManager ≤9.5.5 leading to RCE (authenticated)Exploiting Responsive FileManager ≤9.9.5 file extension bypass bug to get RCE
Konstantin Burov·Apr 18, 2022CouchDB, Erlang and cookies — RCE on default settingsIn this short write-up, I want to share how to get RCE on a system with CouchDB installed on most installations…
Konstantin Burov·Nov 1, 2019Уязвимости СЭД Detrix — бесплатной программы автоматизации документооборота«Detrix» — Бесплатная программа автоматизации документооборота. Казахстанская разработка от основателя СЭД «Documentolog» Андрея Сурова…
