27 matches found
DRA_writeup
Security vulnerabilities in Oracle DSR KPN CISO REDteam KPN is a telecom operator located in the Netherlands. The CISO REDteam was introduced in 2013 and is KPN’s ethical hacking team. This team is involved in security tests of KPN applications and services to ensure that our customers’ data is...
liara (>=2.0.0a7, <=2.0.7), mkdocs-kpn (>=0.15.0, <=0.18.3) +4 more potentially affected by CVE-2026-67422 via pymdown-extensions (6.3.0)
pymdown-extensions PYPI version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - liara =2.0.0a7, =0.15.0, =0.0.5, =4.0.0, =7.0.4 - thea 0.0.1 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-365...
liara (>=2.0.0a7, <=2.0.7), mkdocs-kpn (>=0.15.0, <=0.18.3) +4 more potentially affected by CVE-2026-67422 via pymdown-extensions (6.3.0)
pymdown-extensions PYPI version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - liara =2.0.0a7, =0.15.0, =0.0.5, =4.0.0, =7.0.4 - thea 0.0.1 Source cves: CVE-2026-67422 Source advisory:...
liara (>=2.0.0a7, <=2.0.7), mkdocs-kpn (>=0.15.0, <=0.18.3) +4 more potentially affected by CVE-2026-61632 via pymdown-extensions (6.3.0)
pymdown-extensions PYPI version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - liara =2.0.0a7, =0.15.0, =0.0.5, =4.0.0, =7.0.4 - thea 0.0.1 Source cves: CVE-2026-61632 Source advisory: OSV:PYSEC-2026-360...
dike (>=0.1.0, <=0.4.0), liara (>=2.1.0, <=2.3.2) +9 more potentially affected by CVE-2026-61632 via pymdown-extensions (8.2.0)
pymdown-extensions PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - dike =0.1.0, =2.1.0, =0.1.0, =0.19.1, =0.13.0, =0.3.0, =2.2.0, =0.1.0, =0.1.6 Source cves: CVE-2026-61632 Source advisory:...
liara (>=2.0.0a7, <=2.0.7), mkdocs-kpn (>=0.15.0, <=0.18.3) +4 more potentially affected by CVE-2026-61632 via pymdown-extensions (6.3.0)
pymdown-extensions PYPI version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - liara =2.0.0a7, =0.15.0, =0.0.5, =4.0.0, =7.0.4 - thea 0.0.1 Source cves: CVE-2026-61632 Source advisory:...
liara (>=2.0.0a7, <=2.0.7), mkdocs-kpn (>=0.15.0, <=0.18.3) +4 more potentially affected by CVE-2025-68142 via pymdown-extensions (6.3.0)
pymdown-extensions PYPI version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - liara =2.0.0a7, =0.15.0, =0.0.5, =4.0.0, =7.0.4 - thea 0.0.1 Source cves: CVE-2025-68142 Source advisory: OSV:PYSEC-2026-182...
liara (>=2.0.0a7, <=2.0.7), mkdocs-kpn (>=0.15.0, <=0.18.3) +4 more potentially affected by CVE-2025-68142 via pymdown-extensions (6.3.0)
pymdown-extensions PYPI version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - liara =2.0.0a7, =0.15.0, =0.0.5, =4.0.0, =7.0.4 - thea 0.0.1 Source cves: CVE-2025-68142 Source advisory:...
CVE-2021-38703
CVE-2021-38703 concerns Arcadyan-derived firmware used by devices such as KPN Experia WiFi (1.00.15). The issue arises from improper sanitisation of user input to the syslog configuration form, enabling an authenticated remote attacker to alter device configuration and achieve remote code executi...
CVE-2021-38703: Undefined Security Weakness
Wireless devices running certain Arcadyan-derived firmware such as KPN Experia WiFi 1.00.15 do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be...
WhatsApp 2.17.52 - Memory Corruption Exploit
Exploit for iOS platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Found this and more exploits on my open source security project: http://www.exploitpack.com Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Date and time of release: 11 October 2017 Tested on:...
Zyxel P-2812HNU-F1 DSL Router Command Injection Vulnerability
The Zyxel P-2812HNU-F1 DSL router suffers from a remote command injection vulnerability. Firmware versions V3.11TUE3 KPN and V3.11TUE8 KPN are affected. Zyxel P-2812HNU-F1 DSL router - command injection ================================================= The Zyxel P-2812 is common in the Netherland...
Flat Assembler 1.7.21 - Local Buffer Overflow
Flat Assembler 1.7.21 - Local Buffer Overflow !/usr/bin/python Developed using Exploit Pack - http://exploitpack.com - Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Tested on: GNU/Linux - Kali 2017.1 Release What is FASM? Flat assembler is a fast, self-compilable assembly langua...
JAD Java Decompiler 1.5.8e - Buffer Overflow Exploit
Exploit for linux platform in category local exploits !/usr/bin/python Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Developed using Exploit Pack - http://exploitpack.com - Tested on: GNU/Linux - Kali 2017.1 Release Description: JAD Java Decompiler 1.5.8e-1kali1 and prior is pro...
JAD Java Decompiler 1.5.8e - Local Buffer Overflow (NX Enabled)
JAD Java Decompiler 1.5.8e - Local Buffer Overflow NX Enabled !/usr/bin/python Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Developed using Exploit Pack - http://exploitpack.com - Tested on: GNU/Linux - Kali 2017.1 Release Description: JAD Java Decompiler 1.5.8e-1kali1 and prio...
TiEmu 2.08 - Local Buffer Overflow Exploit
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Developed using Exploit Pack - http://exploitpack.com - Tested on: Windows 7 32 bits Description: TiEmu Texas Instrument Emulator 2.08 and prior is prone to a...
TiEmu 2.08 - Local Buffer Overflow
!/usr/bin/python Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Developed using Exploit Pack - http://exploitpack.com - Tested on: Windows 7 32 bits Description: TiEmu Texas Instrument Emulator 2.08 and prior is prone to a stack-based buffer overflow vulnerability because the...
JAD Java Decompiler 1.5.8e - Local Buffer Overflow
!/usr/bin/python Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Developed using Exploit Pack - http://exploitpack.com - Tested on: GNU/Linux - Kali 2017.1 Release Description: JAD Java Decompiler 1.5.8e-1kali1 and prior is prone to a stack-based buffer overflow vulnerability...
KPN Interactieve TV - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application KPN Interactieve TV published at the 'play' market has multiple vulnerabilities...
Jaya Baloo on WannaCry and Defending Against Advanced Attacks
Jaya Baloo, CISO of KPN, the Netherlands’ leading telecommunications provider, talks to Mike Mimoso about the WannaCry ransomware outbreak and how large network providers and enterprises must contend with advanced attacks. Baloo will be speaking at the upcoming Borderless Cyber USA conference in...