CVE-2020-14294

CVE-2020-14294 이 취약점은 본인이 발견하여 공개한 것입니다. 이 저장소는 권고advisory를 보관합니다. 이 저장소는 교육 목적으로만 사용됩니다. 링크 권고 SYSS-2020-024 상세 분석 SySS 블로그 항목 공급업체 공지 MITRE 항목 NVD 항목...

bitpixie

bitpixie 전체 블로그는 여기를 클릭하세요 주요 참고 자료 syss 블로그 게시물 Syss의 Github 저장소 Bitpixie로 Bitlocker 크랙 구현 가상 머신으로 재현했습니다. 로컬 머신공격기은 Ubuntu 22.04.5 LTS 시스템을 사용하고, 피해 머신은 각각 Windows 10 21H2 19041.1 및 Windows 11 21H2 22000.318이며, 모두 BitLocker 암호화가 활성화되어 있습니다. QEMU를 가상 머신 관리자로 사용하고 virt-manager로 관리합니다. 여기서는 Window...

CVE-2020-14293

CVE-2020-14293 이 취약점은 제가 발견하여 공개했습니다. 이 저장소에는 권고advisory, 취약한 소프트웨어 및 익스플로잇이 포함되어 있습니다. 이 저장소는 교육 목적으로만 제공됩니다. 링크 권고 SYSS-2020-025 상세 분석 글 SySS 블로그 글 Exploit-DB의 익스플로잇 공급업체 공지 MITRE 항목 NVD 항목 소프트웨어 소프트웨어는 릴리스 페이지에서 찾을 수 있습니다. 가상박스에서 제가 테스트한 vmdk 파일입니다. 자세한 지침은 여기에 있습니다: 릴리스 페이지...

CVE-2020-15492

CVE-2020-15492 이 취약점은 저에 의해 발견되어 공개되었습니다. 이 저장소는 권고문, 익스플로잇, 그리고 취약한 소프트웨어의 설치 실행 파일을 포함하여 이 취약점을 실험해 볼 수 있도록 합니다. 이 저장소는 교육 목적으로만 사용됩니다. 링크 권고문 SYSS-2020-028 SySS 블로그 항목 Exploit-DB의 익스플로잇 공급업체 공지 MITRE 항목 NVD 항목...

C-MOR Video Surveillance 5.2401 / 6.00PL01 Privilege Escalation

Advisory ID: SYSS-2024-027 Product: C-MOR Video Surveillance Manufacturer: za-internet GmbH Affected Versions: 5.2401, 6.00PL01 Tested Versions: 5.2401, 6.00PL01 Vulnerability Type: Improper Privilege Management CWE-269 Risk Level: High Solution Status: Open Manufacturer Notification: 2024-04-05...

DiCal-RED 4009 Log Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-040 Product: DiCal-RED Manufacturer: Swissphone Wireless AG Affected Versions: Unknown Tested Versions: 4009 Vulnerability Type: Improper Authentication CWE-287 Risk Level: High Solution Status: Open Manufacturer Notification:...

DiCal-RED 4009 Missing Authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-035 Product: DiCal-RED Manufacturer: Swissphone Wireless AG Affected Versions: Unknown Tested Versions: 4009 Vulnerability Type: Missing Authentication for Critical Function CWE-306 Risk Level: High Solution Status: Open...

DiCal-RED 4009 Cryptography Failure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-038 Product: DiCal-RED Manufacturer: Swissphone Wireless AG Affected Versions: Unknown Tested Versions: 4009 Vulnerability Type: Use of Password Hash Instead of Password for Authentication CWE-836 Risk Level: Medium Solution...

DiCal-RED 4009 Missing Authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-036 Product: DiCal-RED Manufacturer: Swissphone Wireless AG Affected Versions: Unknown Tested Versions: 4009 Vulnerability Type: Missing Authentication for Critical Function CWE-306 Risk Level: High Solution Status: Open...

DiCal-RED 4009 Weak Hashing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-037 Product: DiCal-RED Manufacturer: Swissphone Wireless AG Affected Versions: Unknown Tested Versions: 4009 Vulnerability Type: Use of Password Hash With Insufficient Computational Effort CWE-916 Risk Level: Medium Solution...

Ewon Cosy+ Hardcoded Key

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-032 Product: Ewon Cosy+ Manufacturer: HMS Industrial Networks AB Affected Versions: Firmware Versions: 21.2s10 and 22.1s3 Tested Versions: Firmware Version: 21.2s7 Vulnerability Type: Use of Hard-coded Cryptographic Key CWE-32...

Ewon Cosy+ Password Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-017 Product: Ewon Cosy+ Manufacturer: HMS Industrial Networks AB Affected Versions: Firmware Versions: 21.2s10 and 22.1s3 Tested Versions: Firmware Version: 21.2s7 Vulnerability Type: Cleartext Storage of Sensitive Information...

SmartNode SN200 3.21.2-23021 OS Command Injection Vulnerability

Product: SmartNode SN200 Analog Telephone Adapter ATA & VoIP Gateway Manufacturer: Patton LLC Affected Versions: = 3.21.2-23021 Tested Versions: 2.21.1-22041, 3.21.2-23021, 3.22.0-23083 Vulnerability Type: OS Command Injection CWE-78 Vulnerability Type: Improper Access Control CWE-284 Risk Level:...

SySS TEF portal code issue vulnerability

SySS TEF portal is an online store system from SySS Germany. A security vulnerability exists in SySS TEF portal version 2023-07-17, which stems from a remote code execution vulnerability...

SySS TEF portal cross-site scripting vulnerability

SySS TEF portal is an online store system from SySS Germany. A security vulnerability exists in SySS TEF portal version 2023-07-17, which stems from a stored cross-site scripting vulnerability...

SySS SmartNode SN200 操作系统命令注入漏洞

SySS SmartNode SN200 is a smart node from SySS. A security vulnerability exists in SySS SmartNode SN200 version 3.21.2-23021 that originates from allowing an unauthenticated attacker to perform operating system command injection...

Razer Synapse 3.7.0731.072516 Local Privilege Escalation

Advisory ID: SYSS-2022-047 Product: Razer Synapse Manufacturer: Razer Inc. Affected Versions: Versions before 3.7.0830.081906 Tested Versions: 3.7.0731.072516 Vulnerability Type: Improper Certificate Validation CWE-295 Risk Level: High Solution Status: Open Manufacturer Notification: 2022-08-02...

Lepin EP-KP001 KP001_V19 Authentication Bypass Vulnerability

When analyzing the USB flash drive Lepin EP-KP001, Matthias Deeg found out that it uses an insecure hardware design which allows an attacker to bypass the password-based user authentication. Product: EP-KP001 Manufacturer: Lepin Affected Versions: KP001V19 Tested Versions: KP001V19 Vulnerability...

Lepin EP-KP001 KP001_V19 Authentication Bypass

Advisory ID: SYSS-2022-024 Product: EP-KP001 Manufacturer: Lepin Affected Versions: KP001V19 Tested Versions: KP001V19 Vulnerability Type: Violation of Secure Design Principles CWE-657 Risk Level: High Solution Status: Open Manufacturer Notification: 2022-04-12 Solution Date: - Public Disclosure:...

Razer Synapse 3.6.x DLL Hijacking

Advisory ID: SYSS-2021-058 Product: Razer Synapse Manufacturer: Razer Inc. Affected Versions: Versions prior to 3.7.0228.022817 Tested Versions: 3.6.0920.091710, 3.6.1010.101113, 3.6.1018.101823, 3.6.1130.111217, 3.6.1201.111814, 3.7.0131.011810 Vulnerability Type: Improper Privilege Management...